Vanilla: Stored XSS in Rich editor via Embed datetime

Summary: Rich embed posts can contain javascript URIs which when clicked will trigger javascript code. Description: Registered users can post content in forum posts, private messages and activity posts containing Rich embeds where the date/time of the embedded post when clicked, will trigger a...