@Rangersfc….has an XSS
Look at this…. and look the search is only for goal.
URL and Payload to be given out in 30 days…if no contact
Notification & Disclosure Timeline
5 May, 2017 at 09:04 GMT Vulnerability reported via Open Bug Bounty
5 May, 2017 at 09:07 GMT Notification sent to generic security emails