This write-up is about my findings of CSRF + XSS and using them both to get a full account takeover. Wish u like it ❤