In this writeup I will show that How I escalated XSS to account takeover.