addon was the name of the parameter, for example: https://domain.tld/path?addon=XSS

Thank you! You can read the below blog post to learn about the web application security roadmap: https://blog.voorivex.team/bug-bounty-roadmap-from-scratch