logo
DATABASE RESOURCES PRICING ABOUT US

dobrenoviny.sk Cross Site Scripting vulnerability

Description

Security Researcher **White_Devil Helped patch 67 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations **, a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting **[dobrenoviny.sk](<https://www.dobrenoviny.sk>)** website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[dobrenoviny.sk](<https://www.dobrenoviny.sk>) ** ---|--- Open Bug Bounty Program:| **View Open Bug Bounty Program** Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **White_Devil Helped patch 67 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAAjCAIAAADNIk3yAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAODklEQVR4nO2cfUxTVxTAq3tABwX5LB/tAtQNk4UwYhjBzBlCCLKGkI4pQ2TIppnMuI4RtjFcXEccMkW2GUeM6cxMiDOGNQ0xZFsIMZ0hGzhSOmTYVIJdrcxhLaZCgefe/rjJzfV90QKVys7vr3fvO/fce885755372u6jmEYCQAAAAAEgPWrPQAAAABgzQI5BgAAAAgUkGMAAACAQAE5BgAAAAgUkGMAAACAQAE5BgAAAAgUwZtj0tPTh4eHhYpAsAEOWtsMDw+/8847K6hwYWFh165df//9t4/yEGBPKEGaY/74449///33hRde4C0CwQY4aM1TU1OTlpa2ggpDQkJCQ0MbGhp8EYYAe3JZJMfcvHkzMjKS99b09PTRo0eFisuku7u7tLRUqPj4uXnzZkxMjMhdISs9TgI3jEU1IwcJiS1hYOIGR5Ahd+/evTfffDMhIUGhUHz00UcLCwt+dUcO0peuVxYf7bPkR2zJgYF7vHv3rsViqaurI+/Ozc3t2rWL1PzPP//s3r07Li5OoVC8//77c3NzqP769euvvPLKhg0bEhMT9+7dOz09jerr6up6e3t9GcnyV4BAGxkQYun7GLfb3dLSIlRcJsGWY54IUlNTp6amVqXrVXEQGXI1NTXz8/Nms7mvr6+/v//w4cOPeTDLwUfHrewj5gu4R4/HEx4eHhYWhm/Nzc0VFxfTNE3KV1dXS6XSkZERk8lksVg++eQTVK9Wq5VK5djY2NDQkNfrra2tRfWxsbEej8eXkSw/wILWyGueYDwru337ttVqzc/P5y0CIpCrwGNj1R00Ozs7NDR05swZhUKxadOm9vb2rq4uf5VQFJWRkUFePE5WxXHLYXJysrCwsK2tDdc8ePDg8uXLJ0+eTE5O3rhxY2trq9FolEgkc3NzWq22vb09OTlZoVA0NjZeuXLFr75WKsCeOCOvDXzKMV9//XV6enpcXNwbb7yB9rnT09NpaWkej2fdunXnzp0ji+3t7ZGRkcePH09MTIyJidmzZ8/s7CzSMzg4+PLLL0dGRioUitdee+3PP//k7a67u7uoqCgkJIRVfPXVV48fP44qh4eHw8LC8KZ7//79H3zwgbjAc889J96cNYxbt25t3749MjJy06ZN58+fx/UPHjzYv39/QkLCM88889lnnz18+BDVf/HFF6wpo+350aNHExISkpOTv/32W4lEMjc3t3fv3sjIyNTU1E8//RQ1R5InTpxIT0+PiYnZvXs3Hhtvd6+//vrnn3+Oh7Rly5Zz586Rpz1C2r755pvt27fjhocOHdqzZw8560V9dO3atbi4uF9++UXIX9xoYTE4OLhly5ann346ISFh586dt27dEjc4rzwZchcvXvzrr78iIiKQvM1mS0lJwQojIiI2btz45Zdfip+AKRSK33//HV389ttvqPKnn34SacIS4DXdw4cPP/7448TExIiIiJ07d969e5cbFeQxDrrmPj6sJ05obEK2JRGJQHJUZI8//PADS0lqauqhQ4fImoiIiNnZWeyF+fn50NBQiUQSFhb23nvvoQkuLCx0dnYWFBT4blXJowEWDEYG/IMRZWJiQiKR1NTUOJ1Om81WUFBQW1uLbo2NjclkMq/XS9M0WRwfH5dIJDt27LDb7TabLTMzU6fToSZyuVyv17tcrvHx8fb29vHxcd5O1Wp1Z2cnt6jX64uKilDlkSNHKIq6cOECKqpUqr6+PnGBhoYG8easYWg0GnIW0dHRqP6tt94qKSmx2+0jIyObN28+efIkshJ3yqi+urp6cnLyxx9/HBsbYximqampoqJifHx8dHQ0Pz//1KlTpKTT6bRarVu3bj1w4IBQdwzDdHV15eTkIAGn0ymVSt1u98TEhEwmE9fmcDikUun9+/dRMTMz02g0krPm9RHW7Ha7MzIyzpw5w+svoWjBzRGnT58+e/as2+2enJysq6vTaDTiBheSZ0UgrkxJSRkYGGApzMrKwgrjOTACJCUlFRQUXL16lXtrYGCgoKAgKSlJ3HQtLS05OTkWi8XhcGi1WpPJxI0K0j5CscSdL+/YeG3Fsr94BJKxSj7UpAYMSzNJcXFxa2srWWMwGCiKys/P93q9Qs25VmUeXRCCwciAX/iUY/CS1N/fr1Kp8C0yPlgLnN1uR/UGgwGthi6Xi6IoHF4kdrs9LS0NXXs8HplM5nK5uEWn0xkeHo405Obm1tfXV1ZWoh6joqLm5+fFBex2u3hzckg0TUulUnIWaIWiaVomk+Hs2N3dnZeXJzRlVI/ngoiPj/d4POjabDbn5uZy7XzlyhVkZ97uGIaZmZlBM2IYpqOjo7S0lOsCrjZEXl5eV1cXlic9IuQjrFmtVuN0xXWQULSIrEQ2mw0tKEIGF5LnVetwOFQqFXp1EFHo4MA7NjS7lpaW2NjY8vJyq9WKKq1Wa3l5eWxsbEtLC3alkOnkcvnQ0BBZw40K7vLHjSXufHnHxmsrVkORCGTFKhlRfuUYnU5XWFhI5n6GYWZmZkwmU2Zm5unTp7nNea3KPBpgQWhkYFEWzzGsRIIfVJEcI5VKcf3o6KhcLkfXFRUV2dnZ9fX1bW1tly9fxjI0TTudTnRtMBgKCgrwLVYxOzu7r69vcnJSqVS63W65XE7TtF6vLysr80Vg0eYYtDkgZ4Em7nQ6Q0NDcb3Vak1KShKaMvcJdLlcEokEvz7HxsbySmI783aHjYn2NIWFhXgbwbsikF5jGKa1tbWmpoZhmFOnTpWXl7MmzusjpLCpqWn9+vVnz54l5UkHCfXLqh8aGiosLExJSUEWwDPlNbiQPK958/LykE3EFfqLy+XSaDQURaEiRVEajcbtdrPEuKZzu90URbGWWu6wWcuf0OPDu6CzxsZrK7KhjxHI6tGvHGM0GlUq1dTUFFeeYZienp7NmzdzmwtZlbUCBIORAb94rN/8v//+e71en5WVNT8/X19f/+6776L6p556Kjk5GV2L/6JMrVb39vZeunSppKRkw4YN2dnZJpOpt7dXrVb7IrBo80Dj9XrXr19/9epVs9lsNpstFovZbF6aqvLycqPReO/evYGBAb9+clNWVtbT0yORSC5dulRWVsa6K+SjmZkZg8Fw4cKFxsZG8ivLEn7wo9Fotm3bZjKZzGYzGsmKyN++fdtiseABi5DAQUT4xo0bBw8eNJlMzc3NqKa5udlkMh04cODGjRukpEh4LzqkpcEd26K2WsEI5OXatWu1tbUGgyEuLg7VLCwsDA4OYgGVSuV0OrkNhazKCrBgMDLgH+IpaGn7GAmxDzUajXgfSmI2m5VKJauSpun4+Hh8NMQqMgzT39+fm5tbWlra09PDMExHR4dWq01KSsLbIHGBRZuTIyFPWoxGo+9nZXjKvO9EMpmMta8XsbPQWRnDMF6vNzY29quvvsKbMB/3MQzDZGZm9vb2RkdH43MtXrCPJiYmKIoaHR1lGKakpOTgwYPYSqSDfNnH3Llzh3wfNJvNeKa8BheS53ZH0zQZKkIKGX/Oympra2UyWX19PeutfGpqqq6uTiaT4c+TQqaTy+Vms5m8tegrttDjw2rIHZuQrVgNfYlAVqWP+xiXy/Xss8+eP3+elPF6vRRF4WOr7u5udDrHbc61KncFIFkVIwP+svQc4/F4KIrCZ5S4iL+nORyOkZGR7Oxs9D1tdHS0uLi4r69vamrKbrfv27evpKQEa0ZnrOi4Fleyigi5XC6Xy5G8w+GIiorKzs72XUD8LnnUi74Y41ngie/bt6+0tJT3mz9ryrxPZm1tbV5e3sjIiNPpPHbsWHNzs7idud1hscrKyqioqIsXL7KctWiOOXz4cFZWFrY/nrWQj0iFY2NjUqnUYrFwHSTU7/379ymKGhsbQwcacrm8o6PD7XZbrVaNRoPHJmRwIXlWBLLcJ6LQd6qqqiYmJoTuTkxMVFVViZuupaUlNzcXfY5Gr8O+LH/cWOLOl3dsvLZi2d+XCGT1aLfbycMl3pHTNF1YWKjVar0E6FZJSUlFRYXD4TCbzc8//3xHRweqt9lsXKeQVmUFWJAYGfCLpecYhmF0Ol14ePh3331HFk+cOCGTyVpbW+VyeXR0dHV19czMDMMw8/PzOp0uIyMjNDRULpdXVVVNTk6yemloaGhqasL6WUVEZWXljh07cDEnJ4clIy4gcpc1WYfDUVRUJJPJMjIy2trayKXt7bffjo+PVyqVOp2OpmnU8NixY6wp8z63Xq+3rq5OqVSGh4er1WrWD7e4duZ2h8WMRqNMJkN9Mf7kGHQ8ghxHCgv5iKVQq9Vu27aN4ThIpN/GxkYcKiaTKScnRyqVJiUl1dfXk9sLXoMLyTOPRiB3mkhheHi4SqUiFQYCIdPRNP3hhx/Gx8dLpVKNRjM1NbXo8sf7+HDny4uQrUj7+xKBrB71er1UKuV+9OYu3CS49zt37lRUVERHRyuVyiNHjuDmXV1dWVlZIlZlBViQGBnwi0VyzBIQClZfyMjI+PXXX4WKwErh8XikUinrR0RL4AlyEDcDBSfLeXwCilarJb+9Lx+v15uWlqbX60VkAhRgQWvkNQn1GD75+M7169dFisBK8fPPP2/dunX5/8oFDvr/0NbWtrK/DggLC+vs7HzppZdEZCDA1gDB+F8yQECZnp5Gv1pe7YEATxIhISEvvvjiyuoUTzDA2gByzP8OfAa92gMBAGDts45hmNUeAwAAALA2gX0MAAAAECggxwAAAACBAnIMAAAAECggxwAAAACBAnIMAAAAECggxwAAAACBAnIMAAAAECggxwAAAACBAnIMAAAAECggxwAAAACB4j8G1qvk2hdoIAAAAABJRU5ErkJggg==) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://1020124.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 20 November, 2019 09:04 GMT ---|--- Vulnerability Verified:| 20 November, 2019 13:44 GMT Website Operator Notified via Bug Bounty:| 20 November, 2019 13:44 GMT Public Report Published [without any technical details]:| 20 November, 2019 13:44 GMT ---|--- Vulnerability Fixed:| 20 November, 2019 16:57 GMT ---|--- Public Disclosure: ![](/images/design/information-icon.png)A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability.| 20 December, 2019 09:04 GMT ---|---