The tool was able to:
- Read Victim's Messages
- Change Victim's Email
- Delte Victim's Account
Note: The vulnerability was reported and is now fixed.
Article: www.shawarkhan.com/2017/08/sarahah-xss-exploitation-tool.html Video: https://www.youtube.com/watch?v=dTv5G2ciZ6E