Textbox inputs are not validated/ sanitized properly Hint 1 Inject a script in the Name or Username field Solution Enter any malicious javascript code. e.g., <script>window.location.href = "http://opendns.com";</script>