XSS Vuln All Generator Sites

XSS Vuln For All Fake Generators

Here Is One For all Gens Well,

This is how to work's The Fake Site Set's The Username Perm
Then u Enter the Username that Sets The perm, Well when Its
Loads it Loads the perm then it exc. The perm so when it say verify
It shows ur perm = Username

If that's hard to understand, it requires the username
U set the username the site saves the perm then exc it.

Vuln to cross site scripting

https://freevbucksgenerator2019.com/generator/

If u Input the Username
<script>document.location.href="https://www.pastebin.com/deathslayer999/"</script>
This Will redirect to the pastebin url


To test if the site is vuln set perm = username to

<script>alert(123)</script>

Should look like this
https://imgur.com/a/2O3qMVG.jpg

Have fun,