HexBrain

Algolia · Report #149154

Stored xss

Validstatus
$100bounty
41upvotes
3 Aug 2016disclosed

How it was found

Hi ,i have found an xss issue here : https://www.algolia.com/explorer#?index=test&tab=ranking Steps to reproduce : 1-Go to : https://www.algolia.com/explorer#?index=test&tab=ranking 2-At the Attributes to index add this script :"><img src=x onerror=prompt('XSS');> and press enter . 3-Click save You will see that the xss has been fired . You can go to https://www.algolia.com/explorer#?index=test&tab=ranking again you will see that xss is fired again .

Thanks , Saleh

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original