Khan Academy · Report #6344

http://smarthistory.khanacademy.org/search-results.html XSS

Validstatus

4upvotes

9 Apr 2014disclosed

How it was found

Hi,

When you go to http://smarthistory.khanacademy.org/search-results.html (use firefox) and search for " onclick="alert(1) and after that click on the search bar a XSS will popup!

Best regards,

Olivier Beg

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original