Open on HackerOneSign in

Udemy · Report #61367

xss on autoserch

Validstatus

1upvotes

8 Jul 2015disclosed

How it was found

i have found a XSS on auto search endpoint https://www.udemy.com/autocomplete/search/?cl=EyNkHjsRED4T&displayType=json&cf=ExRONTsRED5COkUCGxAHKV8HaTMPDBFu&count=4&term=%22%3E%3Cimg+src%3D%3E

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original