TikTok · Report #1322104
XSS on tiktok.com
Validstatus
mediumseverity
72upvotes
23 Oct 2021disclosed
Summary
A cross site scripting vulnerability was found in a TikTok endpoint using the return_url parameter. We thank @@arifmkhls for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.