Chaining Multiple Vulnerabilities + WAF bypass to Account Takeover in almost all Alibaba’s websites

正文

https://medium.com/@y.shahinzadeh/chaining-multiple-vulnerabilities-waf-bypass-to-account-takeover-in-almost-all-alibabas-websites-f8643eaa2855

有一个 过 WAF 的 payload
<details/open/ontoggle=confirm(1)>

• #Bug Bounty