HexBrain
Open on HackerOneSign in

X / xAI · Report #15356

XSS ON MOPUB.COM

Validstatus
4upvotes
15 Aug 2014disclosed

How it was found

PERSITENT XSS ON MOPUB.COM STEPS TO REPRODUCE:

  1. go to order
  2. type in the advertiser "><img src=x onerror=prompt(document.domain)> and then press tab
  3. PAYLOAD RUNS.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original