Admin account/panel takeOver and Doing actions in admin panel via DOM-based XSS

Radancy disclosed a bug submitted by mouhannadlrx: https://hackerone.com/reports/1619445