Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/11/29 8:26 p.m.19 views

Starbucks: Stored XSS in Adress Book (starbucks.com/account/profile)

Hello, I just found a stored XSS in the "Adress book menu" of a user's profile : https://www.starbucks.com/account/profile Description : XSS is happening due to the lack of filtering on the Address.FirstName parameter when you POST a new address on the URL :...

0.7AI score
SaveExploits0
Rows per page
Query Builder