Everton FC Shop!
Yet another XSS on Everton FC website.
Working in chrome and firefox!!
Last time i emailed and disclosed an XSS to them they did not even reply back and say thank you!
I will disclose the XSS url in 30 days.
Reported to OBB and everton twitter account – 22/04/17