HexBrain

IRCCloud · Report #7121

Persistent Cross Site Scripting within the IRCCloud Pastebin

Validstatus
$500bounty
3upvotes
1 Oct 2014disclosed

How it was found

The HTML within a paste does not get correctly sanitized after an initial new line. So the following code gets executed: \r\n<script>alert(1);</script>

https://www.irccloud.com/pastebin/FADYQPrO

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original