12 点作者 PaulSec将近 11 年前

2 条评论

Shank将近 11 年前

It works in the Chrome client and the Windows client apparently; viewing any tweet with script tags in either client results in that script running.

JonoBB将近 11 年前

Confirmed that this works in Linux Chrome. How is it possible that this has not been picked up before? Or is it a new vulnerability?

评论 #7878764 未加载

评论 #7878708 未加载

XSS in TweetDeck