HexBrain

Acronis · Report #859806

Flash Based Reflected XSS on www.grouplogic.com/jwplayer/player.swf

Validstatus
lowseverity
89upvotes
13 Apr 2021disclosed

Summary

Here is my twitter address: https://twitter.com/alicanact60 Don't forget to follow me :)

How it was found

Hello there, I hope you are well!

Steps:

  1. Open firefox.
  2. Go to http://www.grouplogic.com/jwplayer/player.swf?playerready=alert(document.domain) You will see xss alert.

Impact

Reflected XSS

Regards, @mygf

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original