free capital one vulnerabilitie to perform a xss attack

[battsssthehacking]

Cross-site scripting (XSS) vulnerability found in script tag: <script>
// OneTag queue - https://onetagdoc.cloud.capitalone.com/installation#queue
(function (w) {
if (w.oneTag) return;
w.oneTag = {};
w.oneTagEventQueue = [];
w.oneTag.track = function (eventType, dataObject) {
w.oneTagEventQueue.push({
eventType: eventType,
dataObject: dataObject,
});
};
})(window);
</script>

for more on discord https://discord.gg/TGd42U8R