From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata

Hi, let me introduce myself — I’m Kanishka Khandelwal.
I’m currently working as an Associate Security Engineer, and apart from my day job…