X / xAI · Report #129436
xss in DM group name in twitter
Validstatus
4upvotes
22 Apr 2016disclosed
How it was found
hi,
found a xss on twitter
Steps
-
Create a DM group with payload
<script>alert(1);// -
Whenever anybody shares a tweet via DM, XSS will popup