writeups.xyz / How I was able to Turn a XSS into a Account Takeover

Submitter : c2a

Date: 3 February 2021

Bounty : undisclosed

Vulnerabilities :

• Web Cache Poisoning
• Stored XSS
• Account Takeover
• OAuth
• Logic Flaw

Programs :

• Undisclosed

Authors :

• Josh Fam (@Pullerze)

Link :
https://pullerjsecu.medium.com/how-i-was-able-to-turn-a-xss-into-a-account-takeover-ae0c478640e7