Open Bug Bounty Community Forum

This is stored and doesnt even require the cookie; you'd think they'd have learned a few security lessons after being hacked right?...

Nice find! Stored

Have they contacted you about this? I usually find websites that have recently been exploited are very quick to respond to vulnerabilities researchers find. It's a shame it takes most websites a serious incident like they experienced to take their security seriously.

Spam404Online wrote:Nice find! Stored

Have they contacted you about this? I usually find websites that have recently been exploited are very quick to respond to vulnerabilities researchers find. It's a shame it takes most websites a serious incident like they experienced to take their security seriously.

Nope Waiting on an email to be honest; no excuse for not responding to it after the breach they suffered; they've learned nothing

edit: 1 minute after posting and i see this

it is not necessary to have bounty program, ask for reward for responsible disclosure!