Apr 10, 2026My First High-Severity Bug: Chaining Open Redirect and DOM XSS into Account Takeovertheblxckcicada