Content Spoofing with text injection

Hubspot hosted page allows content spoofing through text injection by messing around with the URL.

 

A picture speaks a thousand words. Here's how it looks like:

 

Screen Shot 2017-06-02 at 11.21.35 AM.png

Please set up a proper 404 page for this.

0 Upvotes
HubSpot updates