Respondly: Import emails from Gmail are activate XSS

2014-04-17T20:03:19
ID H1:7913
Type hackerone
Reporter sasi2103
Modified 2014-04-21T16:22:41

Description

Hi,

If you choose to import your contacts via Gmail and the contact name contains JS, it will execute it.

Sasi