XSS Hacking Swagger-UI - from XSS to account takeovers We have reported more than 60 instances of this bug across a wide range of bug bounty programs including companies like Paypal, Atlassian, Microsoft, GitLab, Yahoo, ... Dawid Moczadło 16 May 2022 · 10 min read