Moneybird · Report #131038
Stored XSS in Financial Account executing in Bank tab
Validstatus
7upvotes
13 Jun 2016disclosed
Summary
The researcher found a situation in which XSS was possible in the values of certain fields in the settings of an account. We have implemented measurements to prevent XSS in these fields.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.