Cross-site scripting on the main page of flickr by tagging a user.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.