Pornhub: [xss] pornhubpremium.com, /redeem?code= URL endpoint

The researcher discovered an XSS at the redeem route via the code parameter...

Instacart: CSRF with redeem coupon request

This behavior is working as intended. We have a number of fraud prevention mechanisms in place that limit the effects of a single entity abusing this feature...