IRCCloud · Report #7121
Persistent Cross Site Scripting within the IRCCloud Pastebin
Validstatus
$500bounty
3upvotes
1 Oct 2014disclosed
How it was found
The HTML within a paste does not get correctly sanitized after an initial new line. So the following code gets executed: \r\n<script>alert(1);</script>