ownCloud · Report #187380

Stored xss

Duplicatestatus

5upvotes

30 Mar 2017disclosed

How it was found

visit this https://conference.owncloud.org then go to edit profile click button which i give in s.jpg then go to Biography and paste this code "><script>prompt(1)</script>

proof https://conference.owncloud.org/users/949

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original