Automattic · Report #14303
http://jetpack.me/ Self XSS
Validstatus
2upvotes
8 Jul 2014disclosed
How it was found
Hi there :)
I found a self XSS located at the front page of http://jetpack.me/, To reproduce this you have to scroll to the Every feature! part and search for <img src=x onerror=alert(1)> in the search engine.
Best regards,
Olivier Beg