MercadoLibre · Report #1955485
Stored Cross-Site Scripting in mercadopago.com.ar
Validstatus
highseverity
109upvotes
13 Mar 2025disclosed
Summary
We thank @elmago and @n1ko for the report and for providing clear reproduction steps with a proof-of-concept code demonstrating the vulnerability. MercadoLibre acknowledged the issue and worked on a fix internally.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.