https://www.roblox.com/<script>alert(10)</script>its only test guys <:

deawdewadewa<script>dewdaewddaewdwed</script&gt;</p>

hiiiiiiiiiiiiiiiii

test test test

https://forum.wearedevs.net/images/avatars/99921_1692935196996.pharpng

https://forum.wearedevs.net/images/avatars/99921_1692935196996.pharpng

https://javascript:alert(10)

dewad

Do you know what is bug bounty bro?

I found an xss stored vulnerability

When you fetch a new Discord image link and modify the name of the image and put javascript html or css code, it will work fine

When you put an image link, a new class will be created, which is not protected. The programmer did not focus on filtering this class

test: httpjavasript:alert(10)//cdn.discordapp.com/attachments/1021469572391505920/1099287799930302525/<button onclick=alert(1)>test</button>.png

my paypal : ahmdnaser1232@gmail.com pls donate me 10 if you can <:
Also, there is a file upload loophole that I found. Believe me, I can upload any file, but if it is similar to the word jpg, your code has a problem.