Algolia · Report #203241

Reflected XSS

Validstatus

14upvotes

11 Feb 2017disclosed

Summary

XSS triggered by specific search query that needed to be inserted manually into the impacted element.

The issue was detected as part of ongoing penetration test and despite this report being later than the initial disclosure, bounty has been awarded.

Thanks @Algolia , @adams for Fixing this Bug @Algolia , Keep it up ;)

Regards Mahmoud Osama (Mahmoud0x00)

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original