HexBrain

Acronis · Report #1081747

Cross Site Scripting (Reflected) on https://www.acronis.cz/dotaznik/roadshow-2020/

Validstatus
lowseverity
$50bounty
23upvotes
26 Aug 2024disclosed

How it was found

You can post javascript code in form fields

Summary

[add summary of the vulnerability]

Steps To Reproduce

[add details for how we can reproduce the issue] steps : 1-go to vulnerability link : https://www.acronis.cz/dotaznik/roadshow-2020/ 2- enter this javascript code "><script>alert(1);</script> in form field

  1. [add step]
  2. [add step]
  3. [add step]

Recommendations

[add details for how to fix or at least mitigate the issue]

Impact

If an attacker can control a script that is executed in the victim's browser

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original