Re: [ CWE-79 ] *.nastyfans.org is vulnerable to script injection

There is not much more you can do with a reflected XSS on such a site. That's basically it.

Well we can do, It depends.
How about transferring to p*rnhub.com or to your bitcointalk.org profile page instead of popup??