hehe, nice find! Great that you take the 'responsible disclosure' approach. It's not the first time, I remember a block explorer that was susceptible as well... not sure if this ever got fixed...
You are viewing a single comment's thread from:
Sort: Trending
@crokkon Yep, it was me (@gaottantacinque) that reported the XSS in not one but 2 block explorers. All my disclosed vulnerabilities got timely fixed so far.
——-
My previous security disclosures:
- XSS vulnerabilities in hive-db.com
- XSS vulnerabilities in scribe.hivekings.com
- XSS vulnerabilities in hiveblockexplorer.com
- Malicious ads redirecting all Steemit iOS users to a phishing site
- Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page
- XSS vulnerabilities in hive-db.com
- XSS vulnerabilities in scribe.hivekings.com
- XSS vulnerabilities in hiveblockexplorer.com
- Malicious ads redirecting all Steemit iOS users to a phishing site
- Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page