XSS & HTML injection

Disclosed: 2014-04-18 01:05:23 By nahamsec To localize
Unknown
Vulnerability Details
Link: http://www.localize.io/review/3C/languages/3 while approving and reviewing a phrase, you are able to send/set a message. You can XSS that by entering an XSS string String used: <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoNCk+></object>? Screenshot: http://prntscr.com/3awo2p
Actions
View on HackerOne
Report Stats
  • Report ID: 7876
  • State: Closed
  • Substate: resolved
  • Upvotes: 7
Share this report