@16footcatgirl@Zergaloid@misterrocean It is unlikely and nobody would use a vulnerability that can go from XSS to RCE in a website like this. Still, if it was a multiplayer game, chaining an attack to pwn every player with XSS would take minutes to hours at most. This is also a big fuckin' risk.