HexBrain
Open on HackerOneSign in

Rockstar Games · Report #153618

Reflected XSS via #tags= while using a callback in newswire http://www.rockstargames.com/newswire

Validstatus
mediumseverity
26upvotes
16 Mar 2017disclosed

How it was found

Hello,

Here's the link:

http://www.rockstargames.com/newswire/tags#/?tags=../../comments_dal/users/getGlobalLoginSettings.json?callback=alert%28document.domain%29//

Thanks, Ben

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original