Search

Results for:

Sort mode: relevance

Your query is echoed unencoded. Also the result sort reads the last of a repeated sort param - a front-end that trusts the first value can be bypassed (?sort=relevance&sort=admin).

flag{ratcloud_reflected_xss_search}