VK.com · Report #181823
Stored XSS в личных сообщениях
Validstatus
mediumseverity
67upvotes
10 Jan 2017disclosed
Summary
Lack of data filtration, which leads to stored XSS in instant messenger service.
Stored XSS in personal messages. The vulnerability exists due to the lack of filtering data which is taken from the META tags for demonstration preview of the site.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.