account-takeover

A stored cross-site scripting vulnerability in Countly's feedback upload where the server trusted a client-supplied MIME type, serving attacker-controlled HTML from the application's origin and enabling full session compromise.

A flaw in OAuth session token handling that allowed full account takeover with no user interaction.