writeups.xyz / Injecting Punycode URL Within the Arbitrary Text via Comment Box In Google Photo Sharing Option

Submitter : c2a

Date: 5 May 2021

Bounty : undisclosed

Vulnerabilities :

• HTML Injection

Programs :

• Google

Authors :

• Divyanshu Shukla (@Justm0rph3u5)

Link :
https://justm0rph3u5.medium.com/injecting-punycode-url-within-the-arbitrary-text-via-comment-box-in-google-photos-sharing-option-8b424065deb3