Easy 400$ Bounty on Hackerone Public BBP

step1:Create account and create trip on this link “https://example.com/trips”.

step2: Inject any malicious url in trip name to redirect the victim to your malicious website like “https://evil.com".

step3: Go to trips and click on share and in the “add people” section insert the victim email address and send it.

step4: check your victim mail inbox you will see the malicious Website Url and when click on it will redirect to the malicious Website.