A successful prototype pollution chained to a DOM XSS

I recently found a vulnerability that is a little less common and quite interesting in how it works.

Hello hunters, today I decided to share with you my last little discovery and to explain a little more in detail how prototype pollution work.

What is prototype pollution?

Definition from PortSwigger : Prototype pollution is a JavaScript vulnerability that enables an attacker to add arbitrary properties to global object prototypes, which may then be inherited by …

bug bounty cybersecurity dom hacking infosec javascript xss