Facebook HTML Injection

Found a Bug in Facebook 

Hello,

I discovered a Html Injection in m.facebook.com.

Here is a Vulnerable Page.

 

Link: https://m.facebook.com/pages/boosted_post/?pid=154728514671464&sid=317138311763816&error=Please+enter+a+valid+credit%2Fdebit+card+number.

I changed the value of parameter error , to Bug Found By ALi Hasan Ghauri

Link:https://m.facebook.com/pages/boosted_post/?pid=154728514671464&sid=317138311763816&

error=Bug%20Found%20By%20ALi%20Hasan%20Ghauri

 Now See

Facebook accepted this bug.

And The Bounty Reward

Thanks Facebook Security Team !!!