Self-XSS due to image URL can be eploited via XSSJacking techniques in review email
Judge.me disclosed a bug submitted by penguinshelp: https://hackerone.com/reports/1397940 - Bounty: $500 [Source]
HTML INJECTION (STORED)
Judge.me disclosed a bug submitted by criptex: https://hackerone.com/reports/1252155 [Source]
Improper Access Control in Ali Express Importer
Judge.me disclosed a bug submitted by penguinshelp: https://hackerone.com/reports/1609955 - Bounty: $500 [Source]
Stored XSS in Public Profile Reviews
Judge.me disclosed a bug submitted by vj1naruto: https://hackerone.com/reports/1398285 - Bounty: $250 [Source]