Mail.ru: Unrestricted File Upload To Xss Stored [ https://ideas.browser.mail.ru/ ]

Stored XSS in https://ideas.browser.mail.ru/ ideas.browser.mail.ru belongs to extended scope...