HackerPlus+ | Writeups
Self XSS + Login CSRF + OAuth = Account Takeover

🔗 Link :successfully chained the relatively the innocuous vulnerabilities of a Login CSRF and a Self XSS to achieve full account takeover of any Google OAuth user

Complete : Link