HexBrain

Localize · Report #7890

XSS in Localize.io

Validstatus
4upvotes
18 Apr 2014disclosed

How it was found

During signup I used "></code><svg/onload=prompt(1)> as my password.Just after pressing sign up I was forwarded to a new page,where that page was showing my username and asked to click to view my password.When I clicked the javascript executed. Attachment: xss.png

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original