writeups.xyz / One-click reflected XSS in www.instagram.com due to unfiltered URI schemes leads to account takeover

Submitter : c2a

Date: 13 May 2021

Bounty : 9,600

Vulnerabilities :

• Reflected XSS
• Account Takeover

Programs :

• Meta / Facebook

Authors :

• Youssef Sammouda (@Samm0uda)

Link :
https://ysamm.com/?p=695