messenger
messenger copied to clipboard
[Security] Stored XSS in private task
Tested version: latest
Steps to reproduce the vulnerability:
- Login in the application.
- Click on Add a Private task.
- Set
"<script>alert(document.domain)</script>as task description and save. - XSS will fire whenever task is reflected in page.
