LY Corporation · Report #1880607
Reflected XSS on https://travel.line.me
Validstatus
lowseverity
$100bounty
36upvotes
18 Jan 2024disclosed
Summary
The travel platform (https://travel.line.me) has a search feature for products and others. The reflected XSS occurred when JavaScript code was added to the search parameters.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.