Description
The profile of a Liberapay team member contained a link to an expired Twitter account, creating a broken link hijacking vulnerability. The expired Twitter account link was displayed on the member's Liberapay profile and donation page, falsely confirming to donors that the account was legitimate and verified.
Basic Information
ID
H1:3721519
Published
May 8, 2026 at 18:18
Modified
May 9, 2026 at 13:28