Localize · Report #7873

Stored XSS

Validstatus

3upvotes

20 Apr 2014disclosed

How it was found

Hey!!

Steps to reproduce :

while making account add xss payload in username like : "><img src=a onerror=prompt(1);>
login using this .
Go to settings tab (http://www.localize.io/pages/settings)
XSS ll get executed .

Attached PoC .

Daksh

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original