Slack: Stored XSS in Slack.com

2014-04-06T02:40:01
ID H1:6002
Type hackerone
Reporter atom
Modified 2015-03-09T18:52:47

Description

Steps:

Go to your respective URL Mine is https://dezignburg.slack.com/account/photo

now Change your photo using Facebook

But before that create a Album in your Facebook naming it as "><img src=x onerror=alert(document.cookie)>

And you will get this error: http://prntscr.com/37eecd

If you need a video just tell me