XSS in 3rd party plugin (not affecting Uzbey's users)

Disclosed: 2014-11-02 19:39:23 By yappare To uzbey
Unknown
Vulnerability Details
Uzbey currently using a 3rd party solution from sharethis.com to share user's album. It is possible to use this function as a medium to attack sharethis.com's users that using Uzbey service. 1- Create album using XSS payload 2- Share the album using Email function (letter icon) 3- XSS will execute.
Actions
View on HackerOne
Report Stats
  • Report ID: 23010
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report