XSS Vulnerability in Interactive YouTube API Demo Beta
http://pics9.com/images/67262148846124264830.png
There is a Critical Cross site XSS Vulnerability in Interactive YouTube API Demo Beta, Discovered by various sources. One of the White Hat Hacker "Vansh Sharma" Inform us about this XSS Vulnerability with proof of concept.
Proof Of Concept :
  • Open http://gdata.youtube.com/
  • Enter script <img src="<img src=search"/onerror=alert("xss")//"> in the keyword area.
  • Press ADD

Have something to say about this article? Comment below or share it with us on Facebook, Twitter or our LinkedIn Group.