8x8 · Report #503988
Cross-site Scripting (XSS) - Reflected
Validstatus
highseverity
10upvotes
7 Jul 2020disclosed
Summary
The password reset page of the managers portal of VCC reflected input of the tenant parameter without proper encoding considerations.
Just wanted to disclose as it's my first ever report on h1.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.