writeups.xyz / Stored Iframe Injection + CSRF = Account Takeover 😎😎

Submitter : c2a

Date: 16 December 2019

Bounty : undisclosed

Vulnerabilities :

• HTML Injection
• CSRF

Programs :

• Undisclosed

Authors :

• Rounak Dhadiwal (@XploiteR_D)

Link :
https://medium.com/@irounakdhadiwal999/stored-iframe-injection-csrf-account-takeover-42c93ad13f5d