This article describes a cross site scripting (XSS) attack that works on StudySmarter. StudySmarter is a learning platform for pupils and students. The web app offers the possibility to create flashcards and learn them via the website and corresponding apps.