8x8 · Report #722281
Reflected XSS on http://axa.dxi.eu
Validstatus
mediumseverity
3upvotes
9 Jun 2020disclosed
Summary
An older version of our ContactNow application did not adequately encode user input on one of the micro service endpoints utilized by registration.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.