Automattic · Report #13746
xss in simperium.com
Validstatus
2upvotes
10 Aug 2014disclosed
How it was found
Hello Automattic,
I found xss here simperium.com
XSS Payload: '"><img src=x onerror=prompt(document.domain);>
Vulnerable Link: https://simperium.com/help/questions/
Proof of Concept: http://i.imgur.com/E4CM58A.png
Thanks, Jerold Camacho