Zaption: XSS - Gallery Search Listing

ID H1:76713
Type hackerone
Reporter bugs3ra
Modified 2015-08-12T17:13:16


HI. If you upload video having title with XSS payload. and search for the video, the dropdown listing will execute the payload.

I need not to upload the payload, I utilized already uploaded videos.

You can also execute the payload by just start typing into the search box with "><img

That's it, XSS will be executed.