Browse / Linktree

Linktree

See its reports on the map

What gets reported to Linktree

• Cross-site Scripting2
• Access Control1
• Insecure Direct Object Reference1
• Code Execution1
• Open Redirect1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Account takeover - improper validation of jwt signature (with regards to experiation date claim)Improper Authorization · high
   147 votes
2. XSS in SocialIcon LinkCross-site Scripting (XSS) - Stored · high
   106 votes
3. XSS in linktr.ee - on link thumbnail addingCross-site Scripting (XSS) - Stored · medium
   $60069 votes
4. A malicious admin can be able to permanently disable a Owner(Admin) to access his accountInsecure Direct Object Reference (IDOR) · medium
   $60055 votes
5. No validation to Image upload user can upload ( php APK zip files and can be used as storage purpose)Unrestricted Upload of File with Dangerous Type · medium
   $75033 votes
6. [song.link] Open RedirectOpen Redirect · low
   28 votes