Rating:
TLDR: simple xss. make post request with admin bot to become friends and read display name
I don't remember
