8x8 · Report #722301
Xss (cross site scripting) on http://axa.dxi.eu/
Validstatus
mediumseverity
9upvotes
9 Jun 2020disclosed
Summary
An older version of our ContactNow application did not adequately encode user input on the login page.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.