Zaption: XSS - Gallery Search Listing

2015-07-19T09:28:07
ID H1:76713
Type hackerone
Reporter bugs3ra
Modified 2015-08-12T17:13:16

Description

HI. If you upload video having title with XSS payload. and search for the video, the dropdown listing will execute the payload.

https://www.zaption.com/gallery/search?q=%3E%3Cimg

I need not to upload the payload, I utilized already uploaded videos.

You can also execute the payload by just start typing into the search box with "><img

That's it, XSS will be executed.