Reflected XSS at /category/ on a Atavis theme

How it was found

Summary:

Hi team, This report is similar to #947790 You fixed the XSS on search, but I found another XSS at /category/xsspayload

For PoC you can check these URLs : https://magazine.atavist.com/category/%22%3E%3Csvg%20onload%3Dalert%60XSS%60%3E https://docs.atavist.com/category/%22%3E%3Csvg%20onload%3Dalert%60XSS%60%3E

You can encode " ' < > characters with HTML encoding in this endpoint.

Impact

Reflected XSS - cookie stealing

Thanks, Bugra