XSS using javascript:alert(8007)

Disclosed: 2016-11-28 00:38:46 By bains To x
Low
Vulnerability Details
I want to report a xss bug. On apps.twitter.com I logged in and start with new app. In new app there is a feild: website: where user has to gave website of app. I just put javascript:alert(8007) pay load and popup appears.
Actions
View on HackerOne
Report Stats
  • Report ID: 127154
  • State: Closed
  • Substate: resolved
  • Upvotes: 15
Share this report