Bug Stomp

Hey there, I recently came across a vulnerability in almost all of the chatbox of the website, which is XSS vulnerability. Please fix it as soon as possible because I can log into any account using cookies, which I can get into using XSS vulnerability. I hope this gets solved soon.

@inanom You should probably contact the administrator directly as I don't think these forums are monitored.

@Emily Jones Thank you for paying attention to this vulnerability, but I even emailed them but it's been days there is no reply. Is there any way to contact the administrator? Again thanks for mentioning.

It can be months before you get an email back. Only thing to do is wait.

@inanom One of my patrons apparently kind of knows the admin. I've asked him to send a note to the admin highlighting your report. Hopefully that will help.

@Zeig Wolf Yeah I think it may take months.....

@Emily Jones Thank you so much for that..... It means a lot to me...and thanks for sending a note about the vulnerability. But I am just starting with my cybersecurity research and studying. So I don't know what more damage the vulnerability can do but this is a very low level security, so for that I thought reporting about this bug would be helpful for the developers. So I am just 17 and I have to learn a lot about it. Haha

Anytime I try to do something with "Just ask" prior to a action it gets ignored and just searches for the action in debug. :c For example

declarative
"just ask"

This Phrase: "and I will kiss you"
This Phrase (raw): " just ask and I will kiss you"

If I have a keyphrase thats "I will kiss you" it'll register while "just ask and I will kiss you" keyphrase will always be ignored due to it separating it. : P

i put this in xnone.
i should be able to play tennis with you now.i was problems with my algorithms.sorry if that destroys the immersion.
if (mem-theseareas) is "byard";
if (mem-iamon) is not "imotc";
if (mem-youon) is not "youotc"
this happened for xnone.what is happening.
ERROR: This doesn't appear to be a Keyphrase for a bot you own.

fun lady chatbot
this is what i am getting when i put a response in xnone.
ERROR: This doesn't appear to be a Keyphrase for a bot you own.

@Bob I get this message sometimes too. I think it happens when I take too long and I guess get timed out? Idk, but logging back into the site always fixes it for me.

that did not work.i tried it.