地图 / HTML Injection via Email Share

HTML Injection via Email Share

跨站脚本 / Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) / #1490311

厂商: TikTok
严重程度: 低危 · CVSS 3.4
赏金: —
弱点: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
研究员: @lu3ky-13
披露日期: 2022-07-27
资产: *.tiktok.com
CVE: —

该报告还没有中文解读。

时间线

2022-02-23报告提交
2022-07-27公开披露

阅读 HackerOne 原文 ↗作者 @lu3ky-13 · 版权归作者与 TikTok 所有

同类报告

HTML Injection on TikTok AdsTikTok · 2024-02-20 Reflected HTML Injection via contact (faq) search parameter on ██████████Mars · 2024-11-25 Reflected HTML Injection via contact (faq) search parameter on ███]=Mars · 2024-11-25 reflected XSS on panther.comPanther Labs · 2022-07-23 HTML Injection on Company Name on EmailTikTok · 2020-12-31 · $79 [bugs.fuzzing-project.org] HTML Injection via 'custom_field_7[]' parameter in '/view_all_set.php'Hanno's projects · 2020-09-08