Comment Comment by random234528 It's on a CP site (giftbox). The exploit got loaded on the confirmation page after logging in. parent random234528 10 years ago