XSS vulnerability reported in Yahoo subdomain website

Vansh Sharma & Vaibhuv Sharma from India Reported another important Cross site scripting XSS vulnerability in Yahoo subdomain as shown.

Vulnerable Link : https://au.tv.yahoo.com/plus7/royal-pains/
password auditor

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications that enables attackers to inject client-side script into Web pages viewed by other users.

Found this article interesting? Follow THN on Facebook, Twitter and LinkedIn to read more exclusive content we post.