Pornhub: [xss, pornhub.com] /, multiple parameters

I want to report multiple XSS on your sub domains. 1. http://de.pornhub.com/video/search?search=alertdocument.cookie; 2. http://es.pornhub.com/video?c=alertdocument.domain; 3. http://www.pornhub.com/albums/female-misc-straight?o=alertdocument.domain; 4...

Pornhub: [stored xss, pornhub.com] stream post function

Stored Cross Site Scripting The user profile page is vulnerable to stored cross site scripting, a user can post a text post on their page with the following as the message body: http://url=http://www.pornhub.com/"/onmouseover="alertdocument.domain"/http://a/"/url This gets stored in a post and ca...

Pornhub: [reflected xss, pornhub.com] /blog, any

The researcher identified that the following URL for the Pornhub blog was vulnerable to reflected/semi-stored cross site scripting, which enabled the researcher to craft a URL that pops multiple alert boxes as the page is loading. The affected url can be seen below:...