IRCCloud · Report #7441
Dangerous Persistent xss
Validstatus
4upvotes
13 May 2014disclosed
How it was found
If a person is an op in a channel, it is possible to make all the users inside the irc channel execute javascript code. Steps to repoduce: 1.Go to a random channel where you are op. 2.Enter the following command: /ban <script>alert(2)</script> 3.The script will execute an alert box containing 2 in all the browsers of the users inside the irc channel.