HexBrain

Nextcloud · Report #168054

Unauthenticated Stored xss

N/Astatus
14upvotes
13 Sept 2016disclosed

Summary

to every one who wants to have a little fun and laugh just read this , and say thank you mootez for the first funny report on H1 xD

How it was found

Ohio NextCloud-Sec Team! i know this might be out of scope but i thought i should tell you (no lies i thought i'd get more reputation points) out of the words , here what i'm pointing at: Details:

[!] Title: Akismet 2.5.0-3.1.4 - Unauthenticated Stored Cross-Site Scripting (XSS) Reference: https://wpvulndb.com/vulnerabilities/8215 Reference: http://blog.akismet.com/2015/10/13/akismet-3-1-5-wordpress/ Reference: https://blog.sucuri.net/2015/10/security-advisory-stored-xss-in-akismet-wordpress-plugin.html Fix:

[i] Fixed in: 3.1.5

(PS.) if you think this is out of scope and a waste of time (which i'm sorry about) , mind if you mark it as informative ?

i love you all, kind hugs, Mootez

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original