TikTok · Report #1343492
HTML Injection on tiktoktutorials via firstName parameter
Validstatus
lowseverity
97upvotes
30 Oct 2021disclosed
Summary
HTML injection was found in tiktoktutorials endpoint which could have potentially allowed attackers to modify the content of the email and trick users into visiting malicious sites. We thank @siratsami for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.