Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/05/13 5:41 p.m.55 views

Valve: Stored XXS @ https://steamcommunity.com/search/users/#text= via Profile Name

Dear Valve security staff, Short description --------------------- There is a stored cross-site-scripting vulnerability present at the user search endpoint which can be exploited by modifying profile name of the would be attacking account. See POC picture. Steps to reproduce ---------------------...

6.2AI score
SaveExploits0
Rows per page
Query Builder