Infogram · Report #283565
XSS on infogram.com
Validstatus
highseverity
10upvotes
1 Nov 2017disclosed
How it was found
Hello,
There is a XSS on Report templates.
Free templates : Report Classic
When we modify the values of table we can put XSS Payload.
Payload used :
"><img src=x onerror=prompt(0);> "/><svg/onload=alert(0);>