TikTok · Report #1376961
Cross-site Scripting (XSS) - Stored on ads.tiktok.com in Text field
Validstatus
mediumseverity
75upvotes
20 Jan 2022disclosed
Summary
A XSS (cross-site scripting) vulnerability was found in TikTok ads through "text" field. We thank @lu3ky-13 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.