writeups.xyz / Rxss inside href attribute - Bypassing lots of weird checks to takeover accounts!

Submitter : c2a

Date: 10 March 2023

Bounty : 2,000

Vulnerabilities :

• Reflected XSS
• WAF Bypass

Programs :

• Undisclosed

Authors :

• Ashutosh Dutta (@Maniacmarvel_)

Link :
https://infosecwriteups.com/rxss-inside-href-attribute-bypassing-lots-of-weird-checks-to-takeover-accounts-b4c8b4e70877