My First Bug Bounty: Chaining Open Redirect and DOM XSS into Account Takeover

This was my first ever valid bug bounty report through a VDP, and it got marked Medium severity. It was also not a duplicate, so for me this was a huge win. One thing I had heard a lot in bug bounty i