Disclaimer: This report reflects the submitter's account. It has not been independently verified unless marked Verified. The company may dispute this claim.
Scam Alert: babyone.de — Reflected Cross-Site Scripting (XSS) Disclosure Followed by Unilateral Account Restriction on babyone.de
Company / Program: babyone.de
Platform: Other · Severity: medium · Scam type: ban
Published:
Reported by: Maddy20x
Description
A security vulnerability involving Reflected Cross-Site Scripting (XSS) was discovered within the search functionality (last_search_term) of babyone.de (demonstrated via payload injection within user inputs). Upon professionally disclosing and reporting this security finding to the organization, the communication channels were abruptly severed, and the reporter's associated profiles (such as social media handles) were blocked or restricted instead of handling the responsible disclosure through standard remediation processes.