HexBrain

Uber · Report #140791

XSS in people.uber.com

Duplicatestatus
4upvotes
26 Jul 2016disclosed

How it was found

From the HTML source code of http://people.uber.com I came to know that it uses Yoast WordPress SEO plugin v2.1.1

But it is known to suffer from XSS bug.

Check it for more details and steps: https://wpvulndb.com/vulnerabilities/8045

Bug can be easily fixed upgrading the plugin.

Thanks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original