3 ms·It's an open redirect, not XSS. It's a matter of debate whether an open redirect is a vulnerability or not.by Buge 10y agoIt's an open redirect, not XSS. It's a matter of debate whether an open redirect is a vulnerability or not.