Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2020/07/14 5:29 p.m.97 views

lemlist: stored xss via Campaign Name.

Summary: Hi, I found a stored xss https://app.lemlist.com Steps To Reproduce: 1. go to https://app.lemlist.com/. 2. create or edit campaigns. 3. set the payload / in the Campaign Name. 4. visit Buddies-to-Be tab . 5. click Add one on the right Top . or click on one of the list of Contact 6. you...

6.7AI score
SaveExploits0
Hacker One
Hacker One
added 2020/07/09 5:29 p.m.94 views

lemlist: stored xss in app.lemlist.com

Hi there, I found a stored xss app.lemlist.com. Steps To Reproduce: 1. go to https://app.lemlist.com/. 1. create or edit campaigns. 1. visit tab Buddies-to-Be. 1. click Add one on the right Top. 1. Fill in the input 1. add / Icebreaker and companyName 1. click create . POC F901411 Impact Stealing...

6.8AI score
SaveExploits0
Rows per page
Query Builder