readme.md

Title

Missing authorization allows sales only user to record payment.

URL

https://hackerone.com/reports/919008

Severity score

null

Reporter

vapour

Bounty paid

$250

---

Title

Access token stealing.

URL

https://hackerone.com/reports/821896

Severity score

8.1

Reporter

bugdiscloseguys

Bounty paid

$1,200

---