writeups.xyz / Stored XSS to Account Takeover : Going beyond document.cookie | Stealing Session Data from IndexedDB

Submitter : c2a

Date: 2 August 2022

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Account Takeover

Programs :

• Undisclosed

Authors :

• Syed Mushfik Hasan Tahsin (@SMHTahsin33)

Link :
https://infosecwriteups.com/stored-xss-to-account-takeover-going-beyond-document-cookie-970e42362f43