Gratipay · Report #262852
Reflected XSS - gratipay.com
Validstatus
mediumseverity
36upvotes
24 Aug 2017disclosed
How it was found
Summary
I would like to report a Reflected XSS on gratipay.com.
Browsers Verified In
- Firefox 55.0.2 (up to date)
Steps To Reproduce
Goto this URL:
https://gratipay.com/on/npm/cx%00A<svg onload=alert(1)>
{F215426}