Impact

The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Using javascript: throws an error in parsing the url. But I bypassed it using javascript://%0A.

Through this vulnerability, an attacker is capable to execute malicious scripts.