X / xAI · Report #127154

XSS using javascript:alert(8007)

Validstatus

lowseverity

15upvotes

28 Nov 2016disclosed

How it was found

I want to report a xss bug. On apps.twitter.com I logged in and start with new app. In new app there is a feild: website: where user has to gave website of app. I just put javascript:alert(8007) pay load and popup appears.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original