writeups.xyz / Microsoft Teams — Cross Site Scripting (XSS) Bypass CSP

Submitter : c2a

Date: 13 July 2022

Bounty : 6,000

Vulnerabilities :

• XSS
• CSP Bypass
• HTML Injection

Programs :

• Microsoft

Authors :

• Numan Turle (@Numanturle)

Link :
https://medium.com/@numanturle/microsoft-teams-stored-xss-bypass-csp-8b4a7f5fccbf