Infogram · Report #280865

Non Critical Code Quality Bug / Self XSS on Map Editor

Validstatus

mediumseverity

4upvotes

12 Dec 2017disclosed

How it was found

Hi Team,

I've found non-critical XSS on map editor. It is not for bounty just for code quality.

This is my url:

When i added map on form then edit Country name and replace with "<script>alert(1);</script>" it is executed.

Attached screenshots.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original