Security researcher and developer. I find vulnerabilities and write about them.
A reflected cross-site scripting vulnerability in the search endpoint allowed arbitrary JavaScript execution.