XSS - Gallery Search Listing

Disclosed: 2015-08-12 17:13:16 By bugs3ra To zaption
Unknown
Vulnerability Details
HI. If you upload video having title with XSS payload. and search for the video, the dropdown listing will execute the payload. https://www.zaption.com/gallery/search?q=%3E%3Cimg I need not to upload the payload, I utilized already uploaded videos. You can also execute the payload by just start typing into the search box with "><img That's it, XSS will be executed.
Actions
View on HackerOne
Report Stats
  • Report ID: 76713
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report