1 matches found
Whisper: Stored XSS in wis.pr
Hi, I detected a Stored XSS in wis.pr. These are the steps to reproduce the bug: 1. Create a new group named: Test"alert'test'; 2. Copy the sharing URL http://wis.pr/. 3. Open this URL in a browser. Please find the attached screenshots. Fix: Sanitize the output in twitter:description meta. Please...