Vulnerabilities found in TikTok: Report

Researchers discovered significant vulnerabilities in TikTok, allowing hackers to exploit a function on TikTok's website to access user accounts. By manipulating the download URL, attackers could send fraudulent SMS links, gaining control over user accounts. This enabled them to alter content feeds, change privacy settings, and execute JavaScript to extract sensitive information like emails and payment details.

What changes could hackers make to a user's video privacy settings?

What sensitive information could attackers retrieve using JavaScript code?