XSS to code execution vulnerability

[silviavali]

Hello,

I would like to report a XSS vulnerability in your application that leads to code execution.
I have a working poc that I dont want to post publicly.
Please contact me at silviavali14@gmail.com

[silviavali]

Update: I would post a full disclosure on the issue within 90 days from the time of reporting (29 days passed so far). Report still waiting to be sent out.

[hiro0218]

Thank you for the report. However, please send me a mail.

[silviavali]

Hi, Yes I will send you most definitely the report, but do not mark this issue closed as it is not solved yet. Please either give me your e-mail here or yet again contact me at silviavali14@gmail.com. I simply do not know your e-mail.