HexBrain

Automattic · Report #13746

xss in simperium.com

Validstatus
2upvotes
10 Aug 2014disclosed

How it was found

Hello Automattic,

I found xss here simperium.com

XSS Payload: '"><img src=x onerror=prompt(document.domain);>

Vulnerable Link: https://simperium.com/help/questions/

Proof of Concept: http://i.imgur.com/E4CM58A.png

Thanks, Jerold Camacho

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original