Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2022/02/16 3:23 a.m.39 views

SecurityScorecard: HTML injection through Invite Teammate email

Summary: I found HTML injection on domain https://platform.securityscorecard.io/ when we send invite teammate email. In this case "message" parameter is vulnerable. Steps To Reproduce: 1. Go to page https://platform.securityscorecard.io/ and login. 2. Now go to page...

7.1AI score
SaveExploits0
Rows per page
Query Builder