HexBrain

Infogram · Report #282909

Report Design Critical Stored DOM XSS Vulnerability

Validstatus
criticalseverity
6upvotes
8 Dec 2017disclosed

How it was found

Hi Team,

Another XSS vulnerability in report designer but this one is critical.

Problem Point Report's Overview Table

Report Creation Url https://infogram.com/app/#edit/e7b161f1-f708-48e5-bab7-de9887ae202a

Sample Data <a href="" onmouseover="javascript:alert('HackerOne MkSecurity Dom XSS');">Click for Detail</a>

Sample URL https://infogram.com/report-classic-1g57pr0g3xdvp01

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original