messenger
messenger copied to clipboard
[Security] Stored XSS in channel description
Tested version: latest
Steps to reproduce the vulnerability:
- Login in the application.
- Click on Channels.
- Click on Add a new channel.
- Fill all the possible fields with payload
"<script>alert(document.domain)</script>and save. - XSS will fire whenever user info is reflected in page.
