Real world report PoCs

You can read these real world UFU PoCs to better understand how the bug is exploited in the real world scenarios

• File Upload XSS in image uploading of App in mopub by vijay kumar

• RCE deal to tricky file upload by secgeek

• File Upload XSS in image uploading of App in mopub in Twitter by vijay kumar (vijay_kumar1110)

• Unrestricted File Upload to RCE by Muhammad Khizer Javed

Reference: https://whoami.securitybreached.org/2019/06/03/guide-getting-started-in-bug-bounty-hunting/