[Owasp-london] Eventbrite - event registration cross site scripting

[Justin Clarke]

As an aside, can whoever put "<script>alert('OWASP_XSS');</script> ' or 1=1;
--" in as their name in the event RSVP report this to Evenbrite? It is
vulnerable to XSS.

Regards

Justin Clarke
OWASP London chapter leader