Yelp · Report #2947762
RXSS AT https://proze.yelp.com/tmsubscribe.net/vidsn.aspx
Validstatus
mediumseverity
56upvotes
30 Jun 2025disclosed
Summary
Endpoints on proze.yelp.com were vulnerable to Cross-Site Scripting (XSS) which allowed attackers to inject malicious scripts and affect the security of users of the domain.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.