A shoe blog left a little something in your session. Find the XSS vulnerability and steal the cookie.