Uzbey · Report #17235
Album image XSS
Validstatus
2upvotes
18 Jul 2014disclosed
How it was found
There's an XSS in the album script caused by insufficient escaping of double quotes.
PoC:
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original