地图 / HTML Injection on Company Name on Email

HTML Injection on Company Name on Email

跨站脚本 / Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) / #1022655

厂商: TikTok
严重程度: 低危 · CVSS 2.6
赏金: $79
弱点: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
研究员: @gnux
披露日期: 2020-12-31
资产: creatormarketplace.tiktok.com
CVE: —

该报告还没有中文解读。

时间线

2020-10-30报告提交
2020-12-31公开披露

阅读 HackerOne 原文 ↗作者 @gnux · 版权归作者与 TikTok 所有

同类报告

HTML Injection on TikTok AdsTikTok · 2024-02-20 Reflected HTML Injection via contact (faq) search parameter on ██████████Mars · 2024-11-25 Reflected HTML Injection via contact (faq) search parameter on ███]=Mars · 2024-11-25 reflected XSS on panther.comPanther Labs · 2022-07-23 HTML Injection via Email ShareTikTok · 2022-07-27 [bugs.fuzzing-project.org] HTML Injection via 'custom_field_7[]' parameter in '/view_all_set.php'Hanno's projects · 2020-09-08