TikTok · Report #1577370
Unrestricted File Upload Blind Stored Xss in subdomain ads.tiktok.com
Validstatus
lowseverity
$250bounty
38upvotes
4 Aug 2022disclosed
Summary
A blind stored Cross-Site Scripting (XSS) vulnerability was found on a TikTok Ads domain via uploaded file. We thank @mrzheev for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.