Reply to thread

This is the baddest thing i'd ever seen


In the github repo they announce



But whn you look in their code you see in the repository some vulnerabilitys, for example:


[ATTACH=full]11561[/ATTACH]


They don't escape anything and that makes it possible to do xss injections and stuff


Top