Stumbling into the bug of another

The work of another bug hunter is staring back at you. Is your job half done?

Photo by me

Once, I was testing an API endpoint for XSS and stumbled into the work of another bug hunter. The endpoint received search queries via a GET request on the company’s forum page. When I injected my payload to see how the server would react, I noticed that the JSON data in the…