self xss in
Medium
Q
Quora
Submitted None
Actions:
Reported by
panther
Vulnerability Details
Technical details and impact analysis
Hi Quora security team,
there is self XSS vulnerability in https://www.quora.com/profile/Username/
Steps:
copy and paste the link in chrome browser (copy entire link within double quotes
**"blocked:alert(document.domain)//https://www.quora.com/profile/Username/"**
then XSS payload will trigger
please let me know if you need more information.
best
Panther
Report Details
Additional information and metadata
State
Closed
Substate
Not-Applicable
Submitted
Weakness
Cross-site Scripting (XSS) - Generic