HexBrain
Open on HackerOneSign in

Automattic · Report #111500

XSS at wordpress.com

Validstatus
2upvotes
18 Feb 2016disclosed

How it was found

  1. Using Firefox, visit the link: https://wordpress.com/themes/filter/blog/type/%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E
  2. alert is shown.

Screenshot is attached

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original