Stored XSS on funda, funda desk and funda emails

Request a viewing

The confirmation email of my request.

The estate agent

https://pbs.twimg.com/profile_images/800100104715767808/p9R3TNaH_400x400.jpg
The confirmation email of my comment.
My comment shown to the estate agent in funda desk.

Impact

Responsible disclosure

--

--

Security researcher at Mission CTRL. Developer at Alserda. Bug bounty hunter on Intigriti. https://www.missionctrl.nl

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Sander Wind

Security researcher at Mission CTRL. Developer at Alserda. Bug bounty hunter on Intigriti. https://www.missionctrl.nl