DOM-Based XSS at accounts.google.com by Google Voice Extension.

missoumsai.com – This universal DOM-based XSS was discovered accidentally, it is fortunate that the google ads’ customer ID is the same format as American phone number format. I opened Gmail to check my inbox and the…

Tweeted by @TheHackersNews https://twitter.com/TheHackersNews/status/1262328186559508481