Critical stored XSS vulnerability in Instagram’s Spark AR Studio nets 14-year-old researcher $25,000
A 14-12 months-outdated moral hacker has netted a $25,000 bug bounty right after the discovery of a significant saved cross-web site scripting (XSS) vulnerability in Instagram’s Spark AR Studio.
