HexBrain

Imgur · Report #583710

BUG XSS IN "ADD IMAGES"

Informativestatus
mediumseverity
19upvotes
18 Jul 2019disclosed

How it was found

I want to report bug XSS in "ADD IMAGES"

How To Produce it :

  1. Login to your Account
  2. Then Add Images With XSS Payload In filename (example : "><img src=x onerror=prompt(document.domain)>.png)
  3. Click on Image that you upload
  4. in the name of picture XSS will fired

Impact

https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original