Chaturbate · Report #413412
Reflected XSS on secure.chaturbate.com
Validstatus
highseverity
$800bounty
69upvotes
18 Oct 2018disclosed
Summary
The hacker found that an external asset used for fraud detection on secure.chaturbate.com was not sanitizing input parameters and could be used for reflected XSS. This external asset was removed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.