Toshl Finance Web Application Cross Site Scripting

Exploit Title: Toshl Finance Web Application - Multiple Areas of Stored Cross-Site Scripting XSS Date: 6/24/16 Exploit Author: Brett DeWall Exploit Author Twitter: @xbadbiddyx Exploit Author Blog: http://xbadbiddyx.tumblr.com Vendor Homepage: https://toshl.com/app/ Version: Latest commit Contacte...