Deconf · Report #297434
Unauthenticated Reflected XSS in admin dashboard
Validstatus
mediumseverity
13upvotes
19 Dec 2017disclosed
Summary
The researcher has identified a Reflected XSS vulnerability within an analytics report of our plugin. The report was well documented, providing a step-by-step PoC to demonstrate the vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.