Infogram · Report #283742

HTML injection

Validstatus

5upvotes

31 Oct 2017disclosed

How it was found

hi team ...

i found HTML i on https://infogram.com/app/#/library step

.. 1- go to https://infogram.com/app/#/library 2- choose Report Templates . 3- Use Report Classic 4- click to edit_data 5- edit cell Employee ID 5- payload

<h1>hacked</h1>

<marquee behavior="scroll" direction="left">hacked</marquee>

<h1 style="background-color:#000099;">hacked</h1>

6-execute HTML ..

POC .. video on attached

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original