Acronis · Report #666040
Blind XSS on admin.acronis.com via delete account form on account.acronis.com
Validstatus
highseverity
65upvotes
30 Oct 2024disclosed
Summary
Blind XSS was possible on admin.acronis.com. In order to exploit this it was required to send payload during account deletion process on account.acronis.com.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.