Lark Technologies · Report #998138
In orginization stored xss using location (Larksuite survey app)
Validstatus
mediumseverity
11upvotes
14 Jan 2022disclosed
Summary
A stored XSS (cross-site scripting) vulnerability was found in Larksuite survey app using the "site" parameter. We thank imran_nisar for reporting this vulnerability and confirming its resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.