OP 04 June, 2021 - 10:39 AM
It's a bug that only happens with very specific conditions, video: https://streamable.com/bd6kju.
For some reason, the board message won't come up if Skype ID and Google Hangouts ID are empty.
Evasive XSS payload: '';!--"-->'>"><script>alert("1")</script>
URL formatted payload: https://'';!--"-->'>"><script>alert("1")</script>/
I haven't tested with random text instead of XSS because I'm lazy.
For some reason, the board message won't come up if Skype ID and Google Hangouts ID are empty.
Evasive XSS payload: '';!--"-->'>"><script>alert("1")</script>
URL formatted payload: https://'';!--"-->'>"><script>alert("1")</script>/
I haven't tested with random text instead of XSS because I'm lazy.
