PayPal vulnerable to cross-site scripting xss again

[Helsing]

I already reported it to them few days ago, waiting on a reply. This is the second time, my first time was back in 2010 and they offered me $500 cheque


I'm only a security enthusiast, I don't cause any harm.

 

[Nebulous]

Ive never seen it in another language before.

So did you lose any money or did they pay you for reporting the error?

 

[Helsing]

Ive never seen it in another language before.

So did you lose any money or did they pay you for reporting the error?

No that's PayPal in different language, I was just seeing if it worked on International PayPal because it worked on the US PayPal and they paid me back in 2010 but this one I don't think I'll be paid because I was dumb to make a post on HF and everyone tried the xss and they were able to do it and mess about and some of them reported it as well thinking it was theirs. If you entered the link in the picture you would be able to do it as well. I was dumb for not censoring the paypal link and code but ah well it's only couple hundred bucks.

 

[DrLeftover]

Another javascript exploit.

Now I don't feel so bad about it happening to my other site.

 

[Evil Eye]

Looks like they fixed it.