HexBrain

X / xAI · Report #129436

xss in DM group name in twitter

Validstatus
4upvotes
22 Apr 2016disclosed

How it was found

hi,

found a xss on twitter

Steps

  1. Create a DM group with payload <script>alert(1);//

  2. Whenever anybody shares a tweet via DM, XSS will popup

POC https://youtu.be/P2Ram2FBAS4

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original