8x8 · Report #770513
Reflected xss on 8x8.com subdomain
Validstatus
mediumseverity
44upvotes
12 Feb 2020disclosed
Summary
The Beta version of a new chat API was discovered to contain a reflected XSS flaw. With the help of the researcher we were able to resolve the issue and ensure the future chat product will not contain this flaw.
Write-up for beginners like me.. #hackwithcommunity
https://medium.com/@gguzelkokar.mdbf15/get-reflected-xss-within-3-minutes-baa314e25489
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.