writeups.xyz / postMessage DOM XSS vulnerability in Gartner Peer Insights widget

Submitter : c2a

Date: 4 February 2023

Bounty : undisclosed

Vulnerabilities :

• PostMessage
• DOM XSS

Programs :

• Gartner
• Gradle
• LogRhythm
• SentinelOne
• Synopsys
• Veeam
• Vodafone
• Black Kite
• ReversingLabs
• Tata Communications

Authors :

• Justin Steven (@Justinsteven)

Link :
https://kindergartner.computerhacker.ring0.lol