Open on HackerOneSign in

BTFS · Report #846432

xss on bittorrent.com

Informativestatus

mediumseverity

8upvotes

11 May 2020disclosed

How it was found

hi team i realized xss bug on headers.php.

https://www.bittorrent.com/scripts/site/headers.php?_=1586521900793&callback=<PAYLOAD> https://www.bittorrent.com/scripts/social/get_tweet.php?_=1586521900791&callback=<PAYLOAD> its works on IE browsers.

Impact

fix them

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original