writeups.xyz / XSS in Large Messenger and Payment App - a Shout Out to Parameter Guessing

Submitter : c2a

Date: 2 April 2021

Bounty : undisclosed

Vulnerabilities :

• XSS
• HTML Injection

Programs :

• Undisclosed

Authors :

• Lauritz Holtmann (@_Lauritz_)

Link :
https://security.lauritz-holtmann.de/post/xss-parameter-guessing/