HexBrain
Open on HackerOneSign in

WakaTime · Report #245233

HTML - injection

N/Astatus
1upvotes
12 Oct 2021disclosed

How it was found

Hello try to write this

<p onload="javascript:alert('sss');">Done</p> <strike> test </strike> in the comments it will run. https://wakatime.com/blog/26-download-your-team-activity-as-csv#comments

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original