writeups.xyz / Simple HTML Injection to $250

Submitter : c2a

Date: 14 August 2021

Bounty : 600

Vulnerabilities :

• Account Takeover
• Mass Assignment

Programs :

• Undisclosed

Authors :

• Ahmad Halabi (@Ahmad_Halabi_)

Link :
https://ahmdhalabi.medium.com/taking-over-employee-accounts-by-managers-with-zero-employee-interaction-b60784c3ad84