HexBrain
Open on HackerOneSign in

Vimeo · Report #45484

XSS on Vimeo

Validstatus
2upvotes
29 Jan 2015disclosed

How it was found

Poc video: XSS on Vimeo: http://youtu.be/w5QgEEcMARY

  1. Go to https://vimeo.com/settings/profile
  2. Add a link with the payload on URL: javascript:alert(document.domain+"http://")
  3. Click the link and payload will execute.

Thanks @niyaax

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original