Algolia · Report #99368
an xss issue
Validstatus
$100bounty
2upvotes
22 May 2016disclosed
How it was found
i found an xss issue here : https://www.algolia.com/explorer#?index=test&tab=ranking i tried to put an xss payload ("><img src=x onerror=alert(0)>) in index > ranking> so i put the xss payload in Ranking formula then hit save ...when it is being saved the xss payload is being stored that upon Indices xss payload executed p.s please screen shot