General Motors · Report #179826
Flash XSS on Buick_RotatingMasthead_JellyBeanSlider.swf
Validstatus
mediumseverity
4upvotes
5 Jun 2017disclosed
Summary
buick.com website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.