TikTok · Report #1554048
XSS Payload on TikTok Seller Center endpoint
Validstatus
mediumseverity
77upvotes
29 Jun 2022disclosed
Summary
Stored Cross-Site Scripting (XSS) was found on the "Edit Product" page of a TikTok Seller Center endpoint via the "Product Name" field. We thank @aidilarf_2000 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.