TikTok · Report #1350887
Reflected XSS in TikTok endpoints
Validstatus
mediumseverity
356upvotes
22 Oct 2021disclosed
Summary
Cross site scripting vulnerability was found in few TikTok endpoints using the region parameter. We thank @sh1yo for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.