Juicy Infos hidden in js scripts leads to RCE
A writeup about a finding that exploits an endpoint in an embedded javascript code, that leads to Account Takeover, then using the admin dashboard to get RCE !
Read more