Well, this is the 2nd permanent XSS vulnerability I have found on a major website.
The first site was steamcommunity.com on group pages. I have no existing proof of that except a thread and people who can vouch for that existing.
The second is ShitCash. http://$harecash.org/download.php?file=2253997
I'm happy. :)
The first site was steamcommunity.com on group pages. I have no existing proof of that except a thread and people who can vouch for that existing.
The second is ShitCash. http://$harecash.org/download.php?file=2253997
I'm happy. :)


![[Image: JaBGE.png]](https://i.imgur.com/JaBGE.png)