XSS [ Cross Site Scripting ]

https://blog.it-securityguard.com/bugbounty-sleeping-stored-google-xss-awakens-a-5000-bounty/

http://blog.innerht.ml/rpo-gadgets/

https://whitton.io/articles/uber-turning-self-xss-into-good-xss/

http://breaksec.com/?p=6129

https://blog.bugcrowd.com/guest-blog-using-a-braun-shaver-to-bypass-xss-audit-and-waf-by-frans-rosen-detectify

https://whitton.io/articles/xss-on-facebook-via-png-content-types/

https://whitton.io/archive/persistent-xss-on-myworld-ebay-com/

https://sites.google.com/site/bughunteruniversity/best-reports/account-recovery-xss

https://hackerone.com/reports/150179

http://www.pranav-venkat.com/2016/03/command-injection-which-got-me-6000.html

http://www.paulosyibelo.com/2015/12/facebooks-moves-oauth-xss.html

https://hackerone.com/reports/152067

http://mksben.l0.cm/2016/07/xxn-caret.html