General Motors · Report #116135
Reflected Cross Site Script in www.gmcar.gm.com
Validstatus
2upvotes
9 Jun 2017disclosed
Summary
GM community action resource website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.