3 ms·

XSS in TweetDeck

• Shank 12y ago
  It works in the Chrome client and the Windows client apparently; viewing any tweet with script tags in either client results in that script running.
• JonoBB 12y ago
  Confirmed that this works in Linux Chrome. How is it possible that this has not been picked up before? Or is it a new vulnerability?
  • PaulSec 12y ago
    Nothing new in my opinion. I don't understand how it has been unknown for such a long time.
    • passfree 12y ago
      It is unknown because nobody checked. Why nobody checked? Because it is too simple so nobody thought that it will work until now.
  • guipsp 12y ago
    Has to do with the emoji support, I'm pretty sure.