Moneybird · Report #996237
Stored XSS on add project
Validstatus
mediumseverity
12upvotes
5 Oct 2020disclosed
Summary
The researcher found a way to store a snippet that was served to him and or other users of his administration. Subsequently the snippet was executed by his browser, making it a viable XSS vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.