Acronis · Report #961226
XSS in (Support Requests) : User Cases
Validstatus
mediumseverity
$50bounty
30upvotes
24 Jun 2021disclosed
Summary
Stored XSS was possible on https://www.acronis.com/en-us/my/cases/index.html via support case sent to https://support.acronis.com.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.