Type your comment> @mandev said:
I find the right cve but page gives 500 error. I tryed ar***s instead of usrs but not luck. Any nudge?
It will respond with 500 but still go through. Try sending multiple requests and reload the page to see if it’s reflected. Curl/burp/zap works better than going through the browser as well.