Cross Site Scripting (Reflected) on https://www.acronis.cz/

How it was found

Summary You can post javascript and html code in form fields

steps : 1-go to vulnerability link : https://www.acronis.cz/poptavka-acronis/ 2- enter this javascript code "><script>alert(1);</script> in form field for xss and enter <a+href="https://bing.com">Test</a> for html injection.

Impact

Impact 1- Cookie stealing 2- Pishing attacks 3- URL redirection