Public FormAssembly bug reports.

Team Bounty Title
FormAssembly - formassembly.com is vulnerable to padding-oracle attacks.
FormAssembly - XSS on username when register to proffesional account