This video is a proof of concept from 2 May 2019 showing that extra-leker.no was vulnerable to XSS (Cross Site Scripting), but it has been fixed after I reported it to Visma, who is responsible for developing the online toy shop.
------------------------------------------------------------------------
GitHub: https://github.com/sdushantha
Website: https://sdushantha.github.io