HexBrain

Uzbey · Report #17299

Cross site scripting in type parameter

Validstatus
2upvotes
7 Aug 2014disclosed

How it was found

https://staging.uzbey.com/crop-image?fid=1996&type=%22%3E%3Cscript%3Ealert%281%29%3C/script%3E

click the above url and you can able to view the pop up

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original