HexBrain

Eternal · Report #139981

XSS onmouseover

Validstatus
9upvotes
2 Aug 2016disclosed

How it was found

Hi, my first rapport ever so be gentle!

Found an XSS that can be executed by hoovering over links with Firefox

https://www.zomato.com/cs/new-york-city/turtle-bay-restaurants/fast-casual/1zqjrw'/onmouseover='alert%281%29'/style='height:200;width:200'/b=

Will add an picture also that proves that it works!

Best regards!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original