Not a bug IMG xss vulnerabilities?

[topkurs2]

Affected version

2.2.5

IMG xss vulnerabilities?

Hello [IMG alt="y"]http://site.com/x[/IMG] dolly

Hello [IMG]http://site.com/g[/IMG] `Friend` [IMG alt="m"]https://site.com/x[/IMG] dolly

 

[Chris D]

Can you clarify what you're reporting here, if anything? Or are you testing something?

 

[topkurs2]

Can you clarify what you're reporting here, if anything? Or are you testing something?

Found this in posts. Second seems to be working. I want to share and to ask are these vulnerabilities.

 

[Chris D]

These do not look like vulnerabilities, no.

I'm going to close this off for now but if you have a more concrete example of how this could be a vulnerability you should disclose those details safely by reporting the issue in private so we can investigate, if necessary, before information about any vulnerabilities becomes public.