TikTok · Report #1915808
Reflected Cross-site Scripting (XSS) at https://www.tiktok.com/
Validstatus
highseverity
123upvotes
2 Jun 2023disclosed
Summary
A Cross-Site Scripting (XSS) vulnerability was found on a TikTok.com endpoint via the 'link' parameter, which could have resulted in the ability to execute JavaScript code within a user's browser. We thank @mrhavit for reporting this to the team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.