HexBrain

ok.ru · Report #78052

xss in group

Validstatus
6upvotes
10 Jul 2016disclosed

How it was found

step:

payload : "><svg onload=prompt(document.domain) >

1.first create a new group. 2. now create new post, 3. now put payload in new topic and than click on add poll. 4. xss executed.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original