$250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover | Hacker News Reader