Infogram · Report #282909
Report Design Critical Stored DOM XSS Vulnerability
Validstatus
criticalseverity
6upvotes
8 Dec 2017disclosed
How it was found
Hi Team,
Another XSS vulnerability in report designer but this one is critical.
Problem Point Report's Overview Table
Report Creation Url https://infogram.com/app/#edit/e7b161f1-f708-48e5-bab7-de9887ae202a
Sample Data <a href="" onmouseover="javascript:alert('HackerOne MkSecurity Dom XSS');">Click for Detail</a>
Sample URL https://infogram.com/report-classic-1g57pr0g3xdvp01