slack.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-676393 Description| Value ---|--- Affected Website:| slack.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Slack: Stored XSS in Slack.com

Steps: Go to your respective URL Mine is https://dezignburg.slack.com/account/photo now Change your photo using Facebook But before that create a Album in your Facebook naming it as " And you will get this error: http://prntscr.com/37eecd If you need a video just tell me...