Concrete CMS · Report #50782
Stored XSS in Image Alt. Text
Validstatus
2upvotes
8 Jul 2015disclosed
How it was found
XSS payload can be executed and saved permanently in Image Alt. Text. Poc Code: "><b onmouseover=alert('Wufff!')>click me!</b><"
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original