TikTok · Report #2299529
HTML Injection on TikTok Ads
Validstatus
lowseverity
159upvotes
20 Feb 2024disclosed
Summary
A HTML injection was found via the 'q' parameter on a TikTok Ads endpoint which could have resulted in the ability to inject arbitrary HTML tags or phishing. We thank @a77w3 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.