writeups.xyz / Stored XSS Leads to Plaintext Password Disclosure

Submitter : c2a

Date: 17 May 2020

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Information Disclosure
• Unrestricted File Upload

Programs :

• Undisclosed

Authors :

• Bad5ect0r (@Bad5ect0r)

Link :
https://www.bad5ect0r.sh/posts/stored-xss-leads-to-plaintext-password-disclosure/