TikTok · Report #1452375
Reflected xss on ads.tiktok.com using `from` parameter.
Validstatus
highseverity
112upvotes
9 Feb 2022disclosed
Summary
A XSS (cross-site scripting) vulnerability was found on a TikTok ads endpoint using the "from" parameter. We thank @imran_nisar for reporting this to our team and confirming its resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.