General Motors · Report #120656
Reflected Cross Site Script in m.chevrolet.com.wpsegment5.gm.com
Validstatus
2upvotes
30 Aug 2016disclosed
Summary
A Mobile chevrolet.com website included a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.