How I turned Self XSS to Stored via CSRF

Social Engineering - A 50 Euro Bug

Hyperlink Injection - Easy Money (sometimes)