Localize · Report #7890
XSS in Localize.io
Validstatus
4upvotes
18 Apr 2014disclosed
How it was found
During signup I used "></code><svg/onload=prompt(1)> as my password.Just after pressing sign up I was forwarded to a new page,where that page was showing my username and asked to click to view my password.When I clicked the javascript executed. Attachment: xss.png