Reported a stored cross site scripting in Unified Transform (A school management software) where an attacker could gain access to student's account as well as admin's account.

References:

• https://huntr.com/bounties/2-other-changeweb/Unifiedtransform/