when i added a header X-Forwarded-Host: bing.com it inject meta tags in the site containing bing.com does this have any security impact
<meta property="og:url" content="https://bing.com/argentina"/>
can we inject XSS in it? shall i report for this vulnerability?
shall i put an XSS payload or try redirection or what shall i do?
i have already tried to search in many websites for answer but i couldn't find any