Bugcrowd’s web application suffered from a filter bypass and malicious script insertion vulnerability.