Bumble · Report #949823
XSS DI BIODATA
Validstatus
mediumseverity
9 Nov 2020disclosed
How it was found
I did the injection with payload (see mp4), I did the 1st and 2nd experiments. Sorry for the 1st experiment, I didn't video.
When I did the first injection, there was an error after pressing the OK button.
Impact
the impact could have been someone who stole cookies.