X / xAI · Report #34725

XSS via Fabrico Account Name

Validstatus

5upvotes

11 Jul 2016disclosed

How it was found

O.S: Windows 8 Browser: Google Chrome

Steps to reproduce:

Inject This Payload while Signing Up your account at fabrico #"><img src=x onerror=alert(2);>
After the Confirmation, Activate your account

That's it Pop Will indicate XSS vulnerability

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original