HexBrain

Infogram · Report #282535

XSS on Report Classic

Validstatus
5upvotes
3 Nov 2017disclosed

How it was found

hi team ...

i found XSS on https://infogram.com/app/#/library

#step .. 1- go to https://infogram.com/app/#/library 2- choose Report Templates . 3- Use Report Classic 4- click to edit_data 5- payload

<img/ src=1 onerror= alert(document.cookie)> //#"><svg/onload=prompt(1)> “><script>alert(document.cookie)</script>

6-execute XSS and which you edit data XSS stared

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original