8x8 · Report #808167
Stored XSS on Company Logo
Validstatus
mediumseverity
5upvotes
7 Jul 2020disclosed
Summary
The ContactNow application saved the location of the custom company logo without proper encoding considerations.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.