Stored XSS Payload when sending videos

Summary

A Cross-Site Scripting (XSS) payload was found via the text used when sending videos to a friend, which could have resulted in session hijacking, user impersonation, or client-side attacks. We thank aidilarf_2000 for reporting this to our team.

Don't forget Vacation and Have Fun..

Write up :

https://medium.com/@aidilarf/stored-xss-at-https-www-tiktok-com-11fed6db0590