X / xAI · Report #32519
XSS in fabric.io
Validstatus
3upvotes
23 Dec 2014disclosed
How it was found
Proof: http://i.imgur.com/Hk84G3Y.png
Vulnerable Page: https://fabric.io/onboard/invite Put this code: "><img src=x onerror=alert(document.domain)> and email then send invitation