writeups.xyz / Account Takeover: Unraveling IDOR + Stored XSS Flaws in an NFT Marketplace

Submitter : c2a

Date: 26 June 2023

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Stored XSS
• Account Takeover

Programs :

• Undisclosed

Authors :

• Pratik Yadav (@PratikY9967)

Link :
https://medium.com/@pratiky054/account-takeover-unraveling-idor-stored-xss-flaws-in-an-nft-marketplace-158679660fa7