Algolia · Report #149154
Stored xss
Validstatus
$100bounty
41upvotes
3 Aug 2016disclosed
How it was found
Hi ,i have found an xss issue here : https://www.algolia.com/explorer#?index=test&tab=ranking
Steps to reproduce :
1-Go to : https://www.algolia.com/explorer#?index=test&tab=ranking
2-At the Attributes to index add this script :"><img src=x onerror=prompt('XSS');> and press enter .
3-Click save
You will see that the xss has been fired .
You can go to https://www.algolia.com/explorer#?index=test&tab=ranking again you will see that xss is fired again .
Thanks , Saleh