HTML injection at Company Name or Product Name and can be shown on Contact Sales form

There is a stored Cross-Site Scripting (XSS) vulnerability in the LinkedIn Lead Gen Form, specifically in the Company Name and Product Name fields. The vulnerability allows attackers to inject specific HTML elements, enabling them to change the appearance of a page, which can lead to Phishing …

4. Save the company details and proceed to the "Contact Us" Lead Gen form for the company.
5. Observe that the XSS payload remains intact in the "Company Name" field.

OR

1. Create a new LinkedIn account or log in to an existing one.
2. Navigate to the "Products" section on a Company's page and …