Login with Facebook Bug Earns $20K Bounty
The cross-site scripting vulnerability could have allowed trivial account takeover.
May 14, 2020 ... Facebook has awarded a security researcher $20,000 for discovering a cross- site scripting (XSS) vulnerability in the Facebook Login SDK, ...