Bug Bounty Tip:
- Register a new account in a website.
- Click on forgot password and recover/create your password.
- Re-use the link that you used at step 2 to recover your password again.
- If it is valid, this is a vulnerability.
Risk: medium
Reward: 100$-400$