Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/03/27 10:55 a.m.97 views

Pornhub: Blind Stored XSS against Pornhub employees using Amateur Model Program

The researcher discovered a stored XSS attack vector via the amateur model settings page on Pornhub. I was able to turn Stored Self-XSS in the MPP Model Payment Program application input form field into the Blind Stored XSS without user interaction against employees who process the MPP...

5.8AI score
SaveExploits0
Rows per page
Query Builder