Everton FC Shop!

Yet another XSS on Everton FC website.

Working in chrome and firefox!!

Last time i emailed and disclosed an XSS to them they did not even reply back and say thank you!

I will disclose the XSS url in 30 days.
Reported to OBB and everton twitter account – 22/04/17