HR Admin Account Takeover: Chaining Stored XSS and IDOR in a Human Resource App
Share

Recently, I was testing B2B Human Resource web application https://example.redacted.com with roles; “Admin” and “Employee”.

 

 Recently, I was testing B2B Human Resource web application https://example.redacted.com with roles; “Admin” and “Employee”.Continue reading on Medium » Read More Hacking on Medium 

#hacking

By