TikTok · Report #1504202
Stored XSS on TikTok Ads
Validstatus
mediumseverity
201upvotes
19 Aug 2022disclosed
Summary
A Cross-Site Scripting (XSS) vulnerability was found on a TikTok Ads endpoint via a SVG file containing an xss payload. We thank @sinayeganeh for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.