Dark C0d3rs

Full Version: HackerOne Disclosed Reports - 2026-09-12
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Logo
Medium
resolved

Action Text to_markdown: /
 content escapes its delimiter, letting a stored body inject arbitrary Markdown


Bug reported by seoafoz was disclosed at September 12, 2026, 7:08 pm   |   Cross-site Scripting (XSS) - Stored