Quora · Report #228539
self xss in
N/Astatus
mediumseverity
7upvotes
22 May 2017disclosed
How it was found
Hi Quora security team,
there is self XSS vulnerability in https://www.quora.com/profile/Username/
Steps:
copy and paste the link in chrome browser (copy entire link within double quotes "javascript:alert(document.domain)//https://www.quora.com/profile/Username/"
then XSS payload will trigger
please let me know if you need more information.
best
Panther