Respondly · Report #12389
XSS in the input
Validstatus
3upvotes
8 Jul 2014disclosed
How it was found
https://app.respond.ly/create once there go to Team Name and input the code ?'"--></style></script><script>alert(1337)</script> and put the email as a valid one and should inject the XSS code even should show when u login all the time.
Thanks, Jordan Jones @CEHSecurity