cookie-theft

1 post

Cupid’s Matchmaker

Stored XSS in a matchmaking survey steals the reviewer’s session cookie and exposes the flag.

May 3, 2026 TryHackMe
Cupid’s Matchmaker artwork