Khan Academy: Persistent class XSS [the fuck]

2014-04-08T06:28:32
ID H1:6412
Type hackerone
Reporter smiegles
Modified 2014-04-09T17:06:03

Description

Hi,

I created a class called : </script>"><img src=x onerror=alert(0)> and it actually worked 0.0.

It worked here for me : https://www.khanacademy.org/coach/reports/grid?force=1

Best regards,

Olivier Beg