XSS @ love.uber.com
Unknown
Vulnerability Details
Hello Team,
I found a Cross-Site Scripting (XSS) in http://love.uber.com/
> I'm not sure if it is eligible for bounty, as this domain is not listed under scope of the program. still as the issue is an **XSS**, i wanted to bring it to your attention.
please mark this report as **informative** if you're not looking for issues in this domain.
###POC:
http://love.uber.com/australia/?icl_action=reminder_popup&target=javascript%3aalert%28%2fhello+world%2f%29%3b%2f%2f
+ Open this^ link, XSS will be executed!
Looking forward!
Actions
View on HackerOneReport Stats
- Report ID: 117068
- State: Closed
- Substate: resolved
- Upvotes: 19