TikTok · Report #1542703
Stored XSS on TikTok Live Form
Validstatus
mediumseverity
95upvotes
16 Jun 2022disclosed
Summary
A Cross-Site Scripting (XSS) vulnerability was found on a restricted endpoint by an authenticated user inputting a payload in the "Description" form when creating a LIVE event on the TikTok mobile app. We thank @aidilarf_2000 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.