Khan Academy · Report #6412
Persistent class XSS [the fuck]
Validstatus
5upvotes
9 Apr 2014disclosed
How it was found
Hi,
I created a class called : </script>"><img src=x onerror=alert(0)> and it actually worked 0.0.
It worked here for me : https://www.khanacademy.org/coach/reports/grid?force=1
Best regards,
Olivier Beg