Admin Macro Description Stored XSS
Medium
Z
Zendesk
Submitted None
Team Summary
Official summary from Zendesk
A description field only available to account Administrators allowed for unexpected input which could be triggered to execute JavaScript if viewed by lower-level roles under certain circumstances. Thanks to @hariharan21 for their great work!
Actions:
Reported by
hariharan-s
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Cross-site Scripting (XSS) - Stored