HackerOne Disclosed Reports - 2026-09-12

0 Replies, 11 Views

hashXploiter

Yesterday, 12:30 PM

Administrator

Writer

#1

Medium
resolved

Action Text to_markdown: / content escapes its delimiter, letting a stored body inject arbitrary Markdown



                 Bug reported by   seoafoz was disclosed at September 12, 2026, 7:08 pm   |   Cross-site Scripting (XSS) - Stored

View a Printable Version

Users browsing this thread: 1 Guest(s)