$250 | Stored XSS Bug Found! π₯ Live HackerOne Bug Bounty Hunting (Private Program)
In this live bug bounty session, I demonstrate a **Stored Cross-Site Scripting (XSS) vulnerability in Wix** involving an event description URL field. Initially, when I tried entering `javascript:alert(1)` directly into the URL field through the Wix website, the application rejected the input. To investigate the validation behavior, I tested the request using Burp Suite Repeater and modified the URL value to `javascript:alert(1)` before forwarding the request. Although the modified value…









