// archive
// TL;DR I found a cross-site scripting vulnerability on eBay, in the “add photos” field of the Sell page. A simple image-based payload with an event…