Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/07/18 2:47 p.m.17 views

OLX: Stored XSS on contact name

Hi guys, I found a stored XSS in olx.pt. I didn't tested on other domains so feel free to update this report if other domains are also affected. When submiting a new ad, I added my XSS payload on dataperson. The ad got approved and no reflecting on this field. The output was sanitized. One thing...

0.2AI score
SaveExploits0
Rows per page
Query Builder