[TigerHr]

I recently found a cross site scripting vulnerability in a login.php file.
The attack details displayed this message :

URL encoded POST input username was set to iktmnonr" onmouseover=prompt(928677) bad="
The input is reflected inside a tag parameter between double quotes.

Please, i want someone to help me how i do exploit this vunlerability?

[NationalSecurityAgency]

I Can i know alot about XSS. If you either send me your skype. I'm more than happy to help you out.

[rone3xche]

You can send malicious js to the victim and work as keylogger