HexBrain

Algolia · Report #99368

an xss issue

Validstatus
$100bounty
2upvotes
22 May 2016disclosed

How it was found

i found an xss issue here : https://www.algolia.com/explorer#?index=test&tab=ranking i tried to put an xss payload ("><img src=x onerror=alert(0)>) in index > ranking> so i put the xss payload in Ranking formula then hit save ...when it is being saved the xss payload is being stored that upon Indices xss payload executed p.s please screen shot

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original