writeups.xyz / Account takeover via stored XSS with arbitrary file upload

Submitter : c2a

Date: 18 June 2021

Bounty : undisclosed

Vulnerabilities :

• Insecure File Upload
• XSS
• Account Takeover

Programs :

• Undisclosed

Authors :

• 0xbadb00da (@0xbadb00da)

Link :
https://0xbadb00da.medium.com/account-takeover-via-stored-xss-with-arbitrary-file-upload-2774ec6cff51