Acronis · Report #1081747
Cross Site Scripting (Reflected) on https://www.acronis.cz/dotaznik/roadshow-2020/
Validstatus
lowseverity
$50bounty
23upvotes
26 Aug 2024disclosed
How it was found
You can post javascript code in form fields
Summary
[add summary of the vulnerability]
Steps To Reproduce
[add details for how we can reproduce the issue] steps : 1-go to vulnerability link : https://www.acronis.cz/dotaznik/roadshow-2020/ 2- enter this javascript code "><script>alert(1);</script> in form field
- [add step]
- [add step]
- [add step]
Recommendations
[add details for how to fix or at least mitigate the issue]
Impact
If an attacker can control a script that is executed in the victim's browser