XF / News Registration form allows probing emails

[Bots]

Prerequisites

1. At least one custom field is required to be filled out during registration

Steps to reproduce

1. Open the registration form
2. Using browser developer tools, remove attribute required from the required custom field
3. Enter a random gibberish username
4. Enter the email address to check
5. Fully complete the registration form and submit it
6. Examine the results

Result
An error message stating that the required custom field is...

Read more

Continue reading...