Title: Let me just start off saying I&#x27;m 100% amateur and I don&#x27;t really know that much so I could be all wrong.<p>I was browsing the website and got redirected to a random URL. Tracing the requests back I found that the redirect was caused by improperly sanitized html. The exploit more or less gives you an iframe worth of functionality. This allows for very sophisticated phishing.<p>Firefox is not vulnerable to this (You might be able to guess what the vuln is from that).<p>Now this actually pales in comparison to the 2nd exploit I found. I&#x27;m significantly less sure this works but I&#x27;m still pretty sure it will. I have only tested it out on the preview mode and not published.<p>The preview mode DOES sanitize(hits their server and comes back, basic stuff like &lt;script&gt; gets cleaned up). It just doesn&#x27;t do a very good job at it. Now, they could have 2 different checks, one being more secure when publishing but this seems unlikely. I&#x27;m not really familiar with the applicable laws so I&#x27;m not willing to actually publish an attack to test.<p>The 2nd exploit allows me pretty much free reign on their page. More or less it lets you execute whatever javascript you want.<p>I have sent the company 2x messages through a form they have for reporting securities vulnerabilities. However I&#x27;m not even sure that they got through as I never received a confirmation email (it said one would be sent).<p>I tried calling as well but I just discovered it last night and I haven&#x27;t gotten through to anyone who knows anything.<p>My conundrum is this is an EXTREMELY popular website. Top 100 on Alexa, 30bn+ market cap. If this vulnerability is actually real I&#x27;m not sure I&#x27;m comfortable sitting on the information for a prolonged period of time considering how easy it would be to exploit.<p>In the meantime I&#x27;m going to continue to try and contact the company but I&#x27;m not really sure what my next steps should be otherwise.
Upvote: