HexBrain

Eternal · Report #240989

xss found in zomato

Validstatus
mediumseverity
4upvotes
30 Jun 2017disclosed

How it was found

while i was testing with your site i found a xss at add the restraunt option

steps to reproduce

  1. login to zomato
  2. goto add restraunt
  3. in the name feild add any xss payload 4)complete it the restraunt will be sent for verification to the verification team and the xss payload will also be sent to there and get executed there screen shot added

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original