Sony · Report #1309949
Reflected XSS on ███ via jobid parameter
Validstatus
mediumseverity
14upvotes
24 Aug 2022disclosed
Summary
The researcher reported that a URL parameter of a Sony website was vulnerable to reflected XSS. The researcher used the JavaScript onpointerleave event to trigger the XSS payload.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.