XSS via Email

How it was found

This one was easy.

Someone needs send an email with Subject line : "><img src=x onerror=alert(document.cookie);> to the team email, mine was [email protected]

So once the email arrives it will execute Javascript (See attachment)