inDrive · Report #1969696
XSS on terra-6.indriverapp.com
Validstatus
mediumseverity
43upvotes
29 Jan 2024disclosed
Summary
A Cross-Site Scripting(XSS) vulnerability was discovered in the paymentProviderOffset parameter on the terra-6.indriverapp.com domain.
Also subscribe to our telegram channel with updates https://t.me/indrive_bbp.
How it was found
I've found an XSS on terra-6.indriverapp.com
Steps To Reproduce:
- Go to ██████
An alert window will popup.
Supporting Material/References:
███████
Impact
Executing javascript code on users browsers.