Apr 10, 2026My First Bug Bounty: Chaining Open Redirect and DOM XSS into Account Takeovertheblxckcicada