1 Posts
Chaining a stored HTML injection, an IDOR on predictable blog IDs, and stored XSS into full account takeover on a learning platform.