General Motors · Report #134004
Reflected XSS and something more Store XSS too
Validstatus
5upvotes
9 Jun 2017disclosed
Summary
GM Careers website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.