So I started participating in bug bounty not so long and after a lot of read ups and web app practice, I found a stored XSS on quite a big education platform which i was using for learning web development last year.

Yeah, just wanna share to a little story about the bypass of an authentication through source code reading.