<img src=x onerror=prompt(1)> Added to personal information

[Edjazoli]

Hi guys,

Should I’ll be worried when one of my member added this to his personal information in profile ? 

<img src=x onerror=prompt(1)>

You can have a look here in to his profile > https://xbox-vibes.com/profile/507-roguexo/

[Marc Stridgen]

Not unless it actually executed, no. I would however be questioning why a member is adding such a thing, as that would generally be an attempt to see if you can execute code on the page