Eternal · Report #240989
xss found in zomato
Validstatus
mediumseverity
4upvotes
30 Jun 2017disclosed
How it was found
while i was testing with your site i found a xss at add the restraunt option
steps to reproduce
- login to zomato
- goto add restraunt
- in the name feild add any xss payload 4)complete it the restraunt will be sent for verification to the verification team and the xss payload will also be sent to there and get executed there screen shot added