Uber · Report #117068
XSS @ love.uber.com
Validstatus
21upvotes
7 May 2016disclosed
How it was found
Hello Team, I found a Cross-Site Scripting (XSS) in http://love.uber.com/
I'm not sure if it is eligible for bounty, as this domain is not listed under scope of the program. still as the issue is an XSS, i wanted to bring it to your attention.
please mark this report as informative if you're not looking for issues in this domain.
POC:
- Open this^ link, XSS will be executed!
Looking forward!