TikTok · Report #953053
Multiple Cross-Site Scripting vulnerability via the language parameter
Validstatus
mediumseverity
16upvotes
21 Dec 2020disclosed
Summary
A cross site scripting vulnerability was reported across multiple TikTok domains leveraging the language parameter. This issue has been promptly resolved. We thank @luizviana for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.