HexBrain

Respondly · Report #12389

XSS in the input

Validstatus
3upvotes
8 Jul 2014disclosed

How it was found

https://app.respond.ly/create once there go to Team Name and input the code ?'"--></style></script><script>alert(1337)</script> and put the email as a valid one and should inject the XSS code even should show when u login all the time.

Thanks, Jordan Jones @CEHSecurity

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original