Starbucks: Korea - Reflected XSS on https://www.istarbucks.co.kr/app/getGiftStock.do via "skuNo" and "skuImgUrl" parameters

rexvuz discovered the endpoint at https://www.istarbucks.co.kr/app/getGiftStock.do was susceptible to a reflected cross-site scripting vulnerability via the skuNo and skuImgUrl parameters. @rexvuz — thank you for reporting this vulnerability and for confirming the resolution...