Flickr · Report #1534636
Stored XSS in photos_user_map.gne
Validstatus
highseverity
$3,263bounty
54upvotes
23 May 2022disclosed
Summary
The Flickr map page was inadequately escaping the name of groups when browsing the map of a group's photos.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.