writeups.xyz / A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF…

Submitter : c2a

Date: 5 May 2023

Bounty : 200

Vulnerabilities :

• PostMessage
• JSONP
• DOM XSS
• CORS Misconfiguration
• CSRF
• WAF Bypass

Programs :

• Undisclosed

Authors :

• Julien Cretel (@Jub0bs)

Link :
https://jub0bs.com/posts/2023-05-05-smorgasbord-of-a-bug-chain/