Lucene search

K
openbugbountyMetamorfosecOBB:1121815
HistoryMar 22, 2020 - 6:19 a.m.

veggie-hotels.com Cross Site Scripting vulnerability

2020-03-2206:19:00
metamorfosec
www.openbugbounty.org
6

Security Researcher metamorfosec Helped patch 1942 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affectingveggie-hotels.com
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: veggie-hotels.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **metamorfosec Helped patch 1942 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 31 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Cookies:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAETCAIAAABvL0HrAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAgAElEQVR4nO3dfVQUV54//hJaaJriUWilaSJgBl3jGkIIiy55OCZrCMNymARNogSJcozjIYZwjEtcJ+ngjBrURNHDsDkmB3Mc4+ZkGcLZQxiXdXMIyzqIpCUdgkgYaNuWYIs2tthiQ/3+uN/Ur1JPXTyUD/h+/dV1+9a9n3uruj90VdN3BsMwFAAAgAp87nQAAAAwbSHHAACAWpBjAABALcgxAACgFuQYAABQC3IMAACoBTkGAADUghwDAABq8ZJjnnvuuffff59b8pe//CU6Olqqfl9fX1BQ0NSEJk2ql9vTu9qcTufOnTvvdBQAAFPAS455/vnna2pquCU1NTXZ2dlqhnS/u3r16o4dO+50FAAAU8BLjsnKymptbf3pp5/Yktra2ueff17lqAAAYDrwkmNmz56dmprKfpT561//6na7n3rqKd5Vqb6+vrCwMN6+pM7evXvj4uLCwsJWr17tdDrJUzdv3ly3bl1QUNDcuXPffffd0dFRtv7OnTsjIyOjoqI+/vhjiqJOnTq1ZMmSgICAyMjIFStWXLhwgW3//fffnz17dlhY2Jo1a27cuCEMXrQXXni7d+8WNiLaqfLwuAMPDAx88cUXL1++/NZbb0VGRs6aNevVV1+9fv26VIROpzM2Ntblcs2YMePw4cPjmispFy5cePbZZwMDA+fNm/fhhx8KjxQAgEq83/PnXi6rqanJzMz09fVV2LrL5Wpvb29ubm5pabFarVu3biXlpaWlw8PD7e3t9fX1jY2NlZWVbP3Ozk6LxVJVVZWWlkZRVFtb2/r16/v7+y0Wi9FoLCwsZGu2/qytra2srEzYu1Qv3PBaWlqEjch0qjw8s9nc1NRkNpvtdvuCBQscDkd7e/vJkyd7e3tl5iEkJKSzs5OmabfbnZubO665klJYWBgcHNzZ2Xn8+PGqqiqFxw4AYAow3vT29mq12qGhIYZhFixYUFNTQwppmubWCQ0N5ZX39vZSFEV2ZBimqakpPj6ePI6IiHC5XOSx2WxOSUlh6w8ODkpF0t3dPWfOHLam1Wol5dXV1cnJycKoRHvhxizaiHynysO7evUqO3AfH5/h4WGy2dzc/OCDD8rPg9dRiAZjtVpjY2N5UXk8Hq1Wyx0mOVIAALeBxmsSmjt37oIFC+rq6hITE2022/Lly5UnMJqm2UtqRqNxcHCQoqgrV644HI7Y2FhSPjY2ptFo2Pq8Kznffvvtli1bOjo6RkZGxsbGxsbGSLlWq42JiSGPFyxYYLVaeV3L9MKSakSqU+Xh0TQdEhLCDjw4ODggIIBsGgwGh8OhMMJxzZXBYGhubua1MDAwQFEUd5gUAMDt4j3HUD9fLuvt7U1PT2ffKyfM7Xb7+Pi0trayb5c+PpKX7LKzswsKCiorK7Varc1mS09PV6OXCXc64fAURjiuUfj6+kZFRSkPAABAbUpzzJ49e7q6uoqLi0lJeHj48PDwtWvXyMcUm82mvMuoqCidTjc4OPjII4/I17x06ZLdbv/d735HNsmf/4Tb7T5//jz587yrq+uBBx6YQC+ijch0qjw8JZREqHyupOj1eoqiuMOcWDsAABOg6E/7hx56aM6cORaLJTMzk5QEBQUlJycXFxf/9NNP586dKykpIeXh4eFut/vs2bO8L3Hx5Obmbty48fvvv7948eLu3bu3b98uWi0yMjI8PPyPf/yj0+k8d+6cyWTiPltcXHzhwoXvv//eZDKRwHi9K+lF2Ih8p8rDU0I0woiICLfbfe7cuXHNFXHz5k1eia+vb3p6OneY4w0SAGDiFN632bJlS3p6Oreku7t72bJlNE0vXLiwvLycvZNcUlKi0+mqqqqkvhfAMIzb7S4qKjIajTqdLiMjo6enhxHc6yYaGxuTk5O1Wu2cOXOKi4u53ywoKyvT6/WhoaF5eXnsHXW2d6leuPHQNL1r1y5hIzKdKg9PdOBK5oFhGJPJJD8K0WBECxmGIXfRdDpdfHz8nj17cM8fAG6bGQzD3Ok0d2f09fUtWrTo2rVrdzqQ26qvry8xMfHKlSt3OhAAuC/gNzEBAEAtyDEAAKAW5BgAAFDL/Xs/BgAA1IbPMQAAoBbkGAAAUAtyDAAAqAU5BgAA1IIcAwAAakGOAQAAtSDHAACAWpBjAABALcgxAACgFuQYAABQC3IMAACoBTkGAADUghwDAABqQY4BAAC1eM8x165de+ONN+bOnRsQEDB//vz3339/dHSUoiin07lz5071IlO7/SnR19cXFhZ2p6MAALhLec8xa9eutVqtx48ft1qtFRUV9fX1bW1tFEVdvXp1x44d6kWmdvsAAKA2jfzTN27cqKmpcTgcISEhFEU9/fTTTz/99G0JDAAA7nlePseMjY1RFKXR8FOR0+mMjY11uVwzZsw4fPgwRVE3b95ct25dUFDQ3Llz3333XXI9ra+vLygoaPfu3bNnzw4LC1uzZs2NGzdIC6dOnXr88ceDgoKio6NfeOGFH374Qab969evv/baa5GRkTExMe+99x5pnIt0tHPnzsjIyKioqI8//lg0JKl4RHeX6vTChQvPPvtsUFDQ/Pnzjx49yg2AGw97DW10dPTtt9+ePXt2YGDgihUrLl++TMpFZwwAYDrxkmMCAwMzMjJeeuml//3f/71+/TpbHhIS0tnZSdO02+3Ozc2lKKq0tHR4eLi9vb2+vr6xsbGyspLUdLlcLS0tra2tra2tbW1tZWVlpDwzMzM/P99qtTY1NaWlpWm1Wm6/vPY3bdpkt9vb2trq6+tra2srKiqEobpcrs7OTovFUlVVlZaWJhWSVDzC3aU6LSwsDA4O7ujoqKurY3OMjLKysoaGhoaGhq6uLoPB0NHRQcqlZgwAYPpgvBkaGiopKUlISNBoNA8++KDJZPJ4PAzD9Pb20jTNVouIiHC5XOSx2WxOSUkhdSiKslqtpLy6ujo5OZlhmMHBQY1G43a7Zfpl2/d4PDRN9/T0kPLa2trU1FRhZYqiBgcHuYXCkKTiEe4u1anH49FqtdwWQkNDhbPR29tLyhmG0ev1bW1twgGKzpjVao2NjZWZFgCAe4iX+zEURZGLSDt37rx582ZbW1txcbHH49m+fTu3zpUrVxwOR2xsLNkcGxtjL69ptdqYmBjyeMGCBVarlaKosLCwnJyc1NTUZcuWGQyG5OTkJ598UiqAgYGBkZGRuLg4thGSEnhomuZ+xUsqJNF4hLtLdTowMEBRFLcFqbAJp9M5ODi4ePFiXrlUeAaDobm5Wb5NAIB7hfccw/L391+yZEl5eXlubi4vx7jdbh8fn9bWVja1+Ph4uQr32WefnT592mKx2O324uLipUuXHjhwYLzRyxANaWRkZAq7UM7X15dXIjVjvr6+UVFRtzs+AAB1eP/uMvc2DEVRbrfb4/Hw6kRFRel0usHBweifsW+Ubrf7/Pnz5HFXV9cDDzzA7vXoo4+uWbPm7bff/uSTT2pqaqQC0Ov1fn5+f/vb38hmZ2cn++e/DKmQZOJR0qler6coitsCeRAeHj48PHzt2jWyabPZyIOQkJDw8PAzZ84oDA8AYFqRv5TW2dmp1+s/+ugju91+9erVxsbGRYsW7dixg2EYl8ul0Wi6urpIzQ0bNqSmppLPJWVlZaWlpczP9zlycnJsNpvFYklMTDSZTAzDdHR0pKennzhxwuFwWK3WgoKCzMxMXtfc9gsKCrKysqxWq8ViSUpKKi8v51Xm3Q6RCkkqHtHdpTrNzs7mtsDed0lJSSkoKOjv7+/q6kpLS2PLd+zYkZKS0t7ebrPZCgsLGxsbZWaMYRj521QAAPcQ7/f86+rqnnrqqeDgYJ1Ot3jx4o8++oh9ymQy6XS6qqoqhmHcbndRUZHRaNTpdBkZGeRuOXnv3rVrl16vDw0NzcvLGx4eZhhmZGTEZDIlJCT4+fnp9frc3Nz+/n5h12z7Lpdr/fr1ERERRqOR/dIBl2iSEIYkFY/o7lKd2my25cuX0zSdkJCwZ88eNpd0d3cvW7aMpumFCxeWl5ez5R6PZ8uWLREREVqtNjs72+FwSIUnFQkAwD1qBsMw6n1I6uvrW7RoEXsF6Y672+IBAJje8JuYAACgFuQYAABQC3IMAACoRd37MQAAcD/D5xgAAFALcgwAAKgFOQYAANSCHAMAAGpBjgEAALUgxwAAgFqQYwAAQC3IMQAAoBbkGAAAUAtyDAAAqAU5BgAA1IIcAwAAakGOAQAAtSDHAACAWpBjAABALRPMMTdv3nz55ZeDgoKmNhoAAJhOJpJjbt68mZ6e7vF4pjwaAACYTiaSY/r7+5955pk9e/ZMeTQAADCdTHyt5b6+vkWLFl27dm1qAwIAgGkD9/wBAEAtyDEAAKAWjdcakZGR7ONLly5NSU0AALgfeM8xZrNZYVvKawIAwP3Ae46Jjo5W2JbymgAAcD/A/RgAAFALcgwAAKhl4v8fAwAAIA+fYwAAQC3IMf9PXFzcmTNnpDZh+sEhBrgNkGMoiqK+++67sbGxhx9+WHQTph8cYoDbQ1GOOXDgwLx58/z9/R955JGvvvpKvWj6+vqk1gtwOp07d+6U2pyk2trarKwsqc17msyUTu1eXo/IxCJRifAQP/fcc//2b/8mv5fCJS2EI+3r6wsLC5PfS8kpPa45VP5qmkBrV65cefXVVyMjI6Ojo//lX/7l1q1b42rtp59+CgoK+uGHH9iSP/3pT/Pnzx8dHeV21NfXN0Ng//79JIBXXnll1qxZ3ABI/e+++47X3b//+79z5/+2vaEBRVEU4015eXlsbGxDQ8PAwMDRo0fDw8MbGxu97jUxvb29NE0reUqm5gSkpKQcP35cavNe53a7x7vLBKbX6y5Te8gmiXeIOzs79Xr98PCwzC5ut/upp57KycnxOgrhSHt7e0NDQ8e718TqKKk8+eOblZW1atUqm83W2dmZlpZWUlIyrtYYhikqKsrLy2M3Fy9eXFVVRR6zZyzp1P1LHo+HYZjs7GwSQEdHR2pqqslkIvUpisrPz+f1lZqays4/eUM7ceLEwMDAsWPHVH1DA4ZhvOcYg8Fw4sQJdnPfvn2ZmZkqRXNHcozdbg8NDR0ZGRHdvD9N7xwjPMQbN27ctm2b/F69vb2///3vJ5YJplmOGR4eNhqNLpeLbLa0tDz44IPjao1hGLvdTtN0b28vwzB1dXXx8fEkeSiJ0+12azSaq1evks2mpqaFCxeS+hqNRqfT2e12tnJzc7NWq2XnX/iGlpWVNd7gQTkv18qcTqfdbk9LS2NLnnjiiY6ODurnz867d++ePXt2WFjYmjVrbty4QercvHlz3bp1QUFBc+fOfffdd0dHR9n6e/fujYuLCwsLW716tdPpFO10//79cXFxs2bNeuWVV0gdp9MZGxvrcrlmzJhx+PBh3qZMJKdOnXr88ceDgoKio6NfeOEF7mdzVm1t7fLly2fOnMnb/M1vfrN7925SeObMGX9/fzbg11577a233pKv8Ktf/Up+d24ML7744h/+8Ad2c8mSJYcPH5aayYsXL/76178OCgqKi4vbu3cvexFAtJx3iUO0QSnCA0FR1PXr11977bXIyMiYmJj33nuPtMA7Iko6UnJoRkdH33777dmzZwcGBq5YseLy5ctSAXDPrsDAwBdffPHy5ctvvfVWZGTkrFmzXn311evXr0sdcafTeezYscLCQpmpoChq7ty5//qv/ypfR4mpmkBK2Rx6fTWNa+qIgICA8+fPBwYGks3u7m6DwUBR1IULF5599tnAwMB58+Z9+OGH8pcHo6Ki8vPzy8rKKIratWtXSUmJr68vpex6oNvtHhsb8/PzI5tarXZ4eJh9nJmZefDgQbbyvn37Vq1aRR6LvqFZLBb57mAyvOQYl8ul1WrZVyNFUcHBwUNDQ+yzLS0tra2tra2tbW1t5HShKKq0tHR4eLi9vb2+vr6xsbGyspKt397e3tzc3NLSYrVat27dKtqj2Wwmdex2e0lJCUVRISEhnZ2d5FNzbm4ub1MmkszMzPz8fKvV2tTUlJaWptVqhT1K3YzJzMxsaGgghf/5n/85NjZWX19PNhsaGjIyMuQrZGdny+/OjWHlypU1NTXk8cWLF81mc3Z2ttRMFhYW+vn5dXd3NzQ0fPrpp2wjUuVcUodG4YGgKGrTpk12u72tra2+vr62traiokJ4gJR0pOTQlJWVNTQ0NDQ0dHV1GQwG8seNaABswE1NTWaz2W63L1iwwOFwtLe3nzx5sre3l3uy8Y74oUOHMjMzZ8+eLTUVU2uqJpBSMIdKXk3UeKZO6OzZs5s3byYrFhYWFgYHB3d2dh4/fryqqoqtEylAyktKSo4ePfrll1/29vbm5+crn8OQkJCkpKStW7feunXr2rVrJpMpOTmZfXbz5s2VlZXkD83z58/X19dv3LiRnRCZNzRQhfzHHOFn1Z6eHvKpk1z6tFqtpLy6ujo5OZk8joiIYD9Hm83mlJQUtv7Q0BApb2pqio+PF3bHrdPc3MzWkblWJhXJ4OCgRqMR3o2wWq2xsbHkscvloml6cHBQuGm323U6Hdk9JSWluLh41apVpLvg4OCRkRH5ClarVX53bkjDw8NkF4ZhKioq2A/vwpn0eDxarbanp4cdLDkcUuW8eRM9NEJSB8Lj8dA0zfZSW1ubmpoqeoCEHXErSB0aHr1e39bWxi2RCoAEzL144uPjw95faW5uZi/m8I44wzDx8fFms1nJ5SzhMKXqUBQVwREeHs4epglPIK+O1zlU+GpSOHWiA7fZbPHx8ceOHWN+PgO5L0N2Pm0CbAsbNmzQarUVFRXcsHmxcWeysLCQPNXR0ZGYmOjn56fT6SiKInfX2H2feOKJgwcPMgyzZcuW9evXswdX9A0tPDxcag5h8rz8JqZGo/F4PNySsbExjeb/7aXVamNiYsjjBQsWWK1WiqKuXLnicDhiY2OF9WmaZj8FG43GwcFBYY/cOgaDQbSOkGgkYWFhOTk5qampy5YtMxgMycnJTz75JGm2ubmZVD5+/HhKSgr7oZ67GRUVlZCQ0NzcvHDhQrvd/s477yQkJIyOjjY0NDzzzDMzZ86UrxATEyO/Ozf+gICAjIyMmpqa119/vbq6mvxNJzqTAwMDY2NjcXFx7GDJA6lyLqlDI7oog+iBGBgYGBkZ4fZC3gUUdsSSOjRcTqdzcHBw8eLF3EKZAGiaDgkJIY+NRmNwcHBAQAAbv8PhII95R/zPf/5zbGzsww8/3NfXx+1okkta6HQ67s+Q22y29PR0+fi5vE4gpWwOFb6aFE6dUE5OTlFR0YsvvkiGRlEU92XIVpP5tdyNGzdWVVWtXbtWqgJvJklGoSjq7/7u77799lun0/nJJ58cPXr0n/7pn7h7bd68ubi4OC8v79ChQ+yLnfL2hgZq8DK55AP1rVu32PfEoaGh4OBgmV3cbrePj09rayt75Hx87th/4Xz22WenT5+2WCx2u724uHjp0qUHDhzw9fWNiooiFeS/tZyRkdHQ0NDT05OZmRkSEpKYmNjY2Mi90iVfwevuXCtXrjx48GBubm5LS0t1dTWlwkxKNTjlizKIdjQyMsKtI3pohE2Ra/RTiHeIy8vLi4uLhdUmuaSFj48P942V977mlcJDr3AOVXLx4sX29vb/+7//81qTm4YJNhkHBwdrNBp/f3+pfXkzyaPT6fbt28e9+0L88z//85YtW1auXJmamjp//nz2DwjuG5rT6Tx58mRoaChN016HABPn9ZMO72sY5eXl5HtlvCtUNTU17LUymqZ5lzgYsYtdwksTMnWUXyvjRsJlNpuNRiO3xOPxREREsBcueJsMwzQ3N6ekpGRlZdXV1TEMU1FRsWnTpjlz5rDfWpGv4HV3LrfbHR4evm/fvueff54tFM4kuSJBvo3DCK6VCct58yZ6aISkDoTySz3CjmSuMgkPDaHX681mM2/4UtfKZM4ubvy8Q0xRVHh4OLmc5ePjQy7ISM7LRL/9NSUTKN+7cA4VvpoUTp2wa4/Hw51J3rWympoaJdfKROdKKjahjz76KCkpSXTfjz76iKKohoYG3qAMBsPXX39NCmNjYzMyMjIyMmS6gEkax//HOBwO7tfJyTt7Tk6OzWazWCyJiYnkK+oMw2zYsCE1NZX8eVVWVlZaWspMOse4XC6NRtPV1SXclIqko6MjPT39xIkTDofDarUWFBSw37omV7EbGxsXLVrEdsfbJPR6vV6vJ/VtNltwcHBiYqLyCvLP8i6mr1q1Kjg4+PPPP2dLRGcyJycnOzu7t7fXYrEsXryYnSLRct6UijYoJHMgCgoKsrKyrFarxWJJSkoqLy8XPUDCjoaGhjQaTWdnp8fj8XpoiB07dqSkpLS3t9tstsLCQnLiiQag8I1SeIjZd72TJ08GBwfz3gG9zozCOlMygQzDKJlD3j+XiMbAe/komTpu1+yzvBM4Ozub+zKc2P0tYY4R/f8YhmE8Hk98fHxtba3ovm63m/3jmDuo8vLy+Ph4Mm/vvPMORVHkzg2oxHuOYX4+Kn5+fomJieRPcubnw7lr1y69Xh8aGpqXl8feJ3S73UVFRUajUafTZWRkkD92JpljGIYxmUw6nY79Ry12UyqSkZERk8mUkJDg5+en1+tzc3P7+/u5vWzevHnr1q1s+7xNYtWqVTk5OexmcnIyr458BZlnha+umpoamqa5/wkoOpP9/f2ZmZk0TcfGxu7atYudItFyXi+iDQrJvz2tX78+IiLCaDSaTCbuOw73AIl2VFJSQip4PTSEx+PZsmVLRESEVqvNzs52OBxSASh8oxQ9xKK7SJl8jpnMBDLe5lD5BxTey0eqGneT7Vpqxmw22/Lly3U6XXx8/J49e6Ykxwgvvezbt488++mnn3I/xIi2JhoqeUPTarXJyckffPCBwWDo7u72GipMjKIcI0rJi+32mHAkCQkJJ0+elNq8J5B/UFdefp+7Fw/xPUphzhbd8Ta/sSi5egwTdl9/oeLs2bMym/cEs9kcHx+vvPw+dy8eYlDbI488cqdDmM7u6xxzj9q+fbvBYMjKyurp6dm6dSu5pixTDnCvuHXrVnNzs9FovNOBwJRBjrn3PPXUU0VFRRs3bnzggQc2bdq0Zs0a+XKAe8X69etra2sPHTp0pwOBKYO1lgEAQC1YowwAANSCHAMAAGpBjgEAALUgxwAAgFqQYwAAQC3IMQAAoBbkGAAAUAtyDAAAqAU5BgAA1IIcAwAAakGOAQAAtSDHAACAWpBjAABALcgxAACgFuQYAABQy0RyzKVLl1avXj1r1qzo6Og333zz5s2bUx4WAABMAxPJMXl5eVqt1mKxNDY2tre3b9u2bcrDAgCAaWDc62Bev349IiLC4XAEBgZSFHXq1KlVq1adO3dOnfAAAOAephnvDoGBgTdu3GA3R0ZG/Pz8pjQkAACYJiZ7z//3v/99Xl7elIQCAADTzKRyzHvvvefxeDZv3jxV0QAAwHTi/VpZZGQk+/jSpUvs4y+//PLTTz9taWnx9fWVrwkAAPcn7znGbDYLC7///vsNGzbU19fPmjVLviYAANy3xv29Moqirly5kpKSUlpa+vLLL6sREwAATA/jzjGjo6Pp6ekLFy4sKytjC/39/ac6MAAAuOeNO8f09fXFxsZyS0JDQ69cuTKVQQEAwLQwkWtlAAAASuA3MQEAQC3IMQAAoBbkGAAAUIv3HNPX1xcUFKS8RafTuXPnzgns6LXfvr6+sLAw9vEMjpiYmLfffvvWrVvj7ffSpUszZ8785ptvpGJge1RSrgaZkara6WSOnUruhsMBAOMy9Z9jrl69umPHjilvVoimabfb7Xa7h4eH6+rqvv7669LS0vE2cuzYMZqmjx49qkaEU4U70vr6+sbGxgmMFADg9ru3r5X5+/v7+/sHBAT8/d///Z49e7744ovxtnD06NGDBw/W1NSo/clgktiRPvTQQxMbKQDA7TeOHEOun+zduzcuLi4sLGz16tVOp5NXx+l0xsbGulyuGTNm/Md//AdFUfv374+Li5s1a9Yrr7zCrX/z5s1169YFBQXNnTv33XffHR0dneRItFqt2+0e1y4//vijzWZbvXp1UlJSXV0dKbxw4cKzzz4bFBQ0f/587ucb0XIyJzt37oyMjIyKivr4449lRnfq1KnHH388KCgoOjr6hRde+OGHH0hlqXIpfn5+IyMj7L5LliwJCAiIjIxcsWLFhQsXZKISIjV37949e/bssLCwNWvWcBduYEkNR9i11HCUHG7RBsd1OADgbjO+zzEul6u9vb25ubmlpcVqtW7dupVXISQkpLOzk1zb+c1vfuNyucxmM6lvt9tLSkrYmqWlpcPDw+3t7eTiT2Vl5WSG4XQ6TSZTRkbGuPY6cuTIqlWrKIrKzc1l36cKCwuDg4M7Ojrq6uq4b15S5S6Xq7Oz02KxVFVVpaWlyYwuMzMzPz/farU2NTWlpaVptVpSWapc1JUrV955552CggKy2dbWtn79+v7+fovFYjQaCwsLZaIS5XK5WlpaWltbW1tb29rauD/fwBIdjlTXosNRcrhFGxzv4QCAuwvjTW9vL03T5AFFUUNDQ6S8qakpPj5eef3m5mZu/YiICJfLRR6bzeaUlBSpdrgloaGh7GOKoiJ+5ufnt2rVKtKgcEcpCQkJFouFYZjh4WG9Xj80NOTxeLRardVqJRWqq6tJj1LlJIzBwUFey8LRDQ4OajQat9vNqylVzh01O9Lw8HAfH5/09HTRmt3d3XPmzJGJSqpx7riSk5MZwRx6PVhs11LD8dqCaIPjPRwAcLcZ3zqYNE2zXzcyGo2Dg4PK6xsMBrb+lStXHA4H+5s0Y2NjGs24V+TU6XTkl54bGhpKSkoOHToUEBCgfPdTp07RNP3QQw9RFBUQEJCenl5dXb18+XKKomJiYkidBQsWkAcDAwOi5WSMvC81iY4uLCwsJycnNTV12bJlBoMhOTn5ySYzVmUAABj9SURBVCefpChKqlx0pBRF9fT0FBUV7d+//4033qAo6ttvv92yZUtHR8fIyMjY2NjY2JhUVFK0Wi13XFarlVdB6mCJdi06HIWHW9ig1LTLHA4AuKuM+519Srjdbh8fn9bWVva9xseHf9VOp9O53e7R0VF2fRqXy6XT6dgKPj4+0dHRFEWtWbNmz549hw4dev3115XHcOTIkY6ODnbNG7fbbbfbSY6ZJKnRffbZZ6dPn7ZYLHa7vbi4eOnSpQcOHJApF46Uoqjo6Ojy8vK1a9eSHJOdnV1QUFBZWanVam02W3p6+uTjVzgcqa6Fw9m6davXw317xgIAt5vXTzrca1/c6yfcK1cTqE/TdFtbm3zXer2+qamJ3ayoqGAvE/EaP3bsmNFoJJdolFwr83g8c+bMaWlpsf3MarWGhobabDbuRZiamhrRizNsuVRfXkdnNpuNRqOScmEXJ0+eJFcdBwYGNBoNd1/5qIR418pqampEr5UJhyPVtdRwvE6IaINS0y5VDgB3m6nPMS6XS6PRdHV1ydffsGFDamoq+Wu3rKystLRU2NTBgwcTEhIaGxsdDscXX3wRHh7Ophzh2+jChQsrKyvZp9y/5PF4uJXr6+sXLlzI6y4nJ+eDDz7Izs7Oycmx2WwWiyUxMZGNWbRc6t1cOLqOjo709PQTJ044HA6r1VpQUJCZmckwjFQ5b/7ZgXR0dDzxxBMbN24kz+r1+oqKiqtXr3Z1dWVnZ08sx3DHZTKZGIYZGhrSaDSdnZ1k3kQPlmjXUsNRcrhFGxzX4QCAu83U5xiGYUwmk06n27t3r0x9t9tdVFRkNBp1Ol1GRkZPT49oUx988EFsbKyfn9+iRYuqq6uFUbGOHDkSGxs7MjJC3jd5SPph5eXlbdmyhdfXJ598kpSUZLPZli9fTtN0QkLCnj172JhFy6XezYWjGxkZMZlMCQkJfn5+er0+Nze3v7+fYRipcu5IuQPR6/Xr169nv0nR2NiYnJys1WrnzJlTXFwsFZVUnKR8165der0+NDQ0Ly9veHiYPFVSUqLT6aqqqqQOlmjXUsNRcrhFGxzX4QCAuw1+2/++0NfXt2jRomvXriksBwCYEvf2//mDcryV5QAAbgPkmPsCTdM1NTV3OgoAuO8gx0zKmTNnfvvb3/IK4+Lizpw5c0fikTJr1qx58+bd6Shun7i4uNOnT7/88ss//fST8l3utqMGMA0gx0xKfn4+7xrUd999NzY29vDDD9+hiMZn7ty50+9mDDkEjz76qJ+f3+bNm5Xvcq8cNYB7iJccw64jcvuX6FC4hAm7XI0ajct3d/ny5fb29qKiIm6F2trarKws8vjAgQPz5s3z9/d/5JFHvvrqK14A7JIwvr6+cXFx27dvJ78UyVswhti/fz95ytfXl7fajcJldURHzTusBw4ciIuLCwwM/Id/+If//u//Fo1WdA0b+ZHKrwMkPyLhVMyYMYP7s6F/+tOf5s+fz/2RTfYQFBUVNTQ0UApwj9qEKTmpxnW6TnjppgnsOzG3oZc333wzICDg8OHDqvYCKpL/2hn3i8u3/+uhMr/ixVL+vyCT34u3o2gjKSkpx48fZximvLw8Nja2oaFhYGDg6NGj4eHhjY2NvHbYVWHIT3iR/xqR+f8e8j3m+Ph49re/GMHPuHGbtVgsS5cu3bZtm1TA3H3Ly8vj4+PJv7Z88cUXERERvP9GkmpWyUilOvU6ItJpZ2dnaGgoefz666/n5eWxlRcvXky+YC08BMqPMrvLJHk9Y8d74il5CYg2PuEzfFzU7sXhcPj4+JjNZt7/t8E9xEuOsdlsSUlJ5IHX3zG8I+6qHGO320NDQ0dGRhiGMRgMJ06cYJ/at28f958rhfs2NTWRfwuVia23t1en0yUlJW3YsIFbyMsx3F2am5sXLFgg9Sx3X17AlZWVbMDyzY53pLyA5UckLLHb7TRN9/b2MgxTV1cXHx/PfQPiHgKFR5m7i9pUfVOefjnm9owCVOXlWll0dPTp06fJg7/+9a+k8C9/+Yv8XmwFqZVRRkdH33777dmzZwcGBq5YseLy5cvCJU+4H8OlljnhLldz+PBhqcCkVjrhEi5wIgyJ152wkdra2uXLl8+cOdPpdNrtdu6P6j/xxBMdHR0yk6bVaj0ej/zEUhTl4+Pz6aefVlVV/dd//ZfXytQvF5uRIQx47dq1Bw8e9NrsBEbKM94RRUVF5efnkzUIdu3aVVJSwv6iHcU5BDIt8M4T7i6iZ6yS05X65YVlJaerMBIeXoPKl25iT07R1Zvk1/J58cUX//CHP7CbS5YsIa15fRHxrptxL3gqWT3o+vXrr732WmRkZExMzHvvvTc6Onr58mWplxtZPSgwMHDevHkffvghVtq+m03knn9+fv7TTz9Ncg/PqVOnnn766fz8fLIptTJKWVlZQ0NDQ0NDV1eXwWAgb0nyS56ILnPCXa4mNzdXKjCplU64RBc44YXE607YCHtZ3+VyabVa7jtdcHDw0NCQ1JReunRp27Zt2dnZUhW4HnroIZPJtHbtWuEbDQ9vsRkZwoBnzpw5d+5cr82Od6SilI+IKCkpOXr06Jdfftnb28uebIT8nRXe+SncRfSMVel0pWRfSsIGlS/dRBqXWr1Jfi2flStXsl9zv3jxotlsJqelkheRFCWrB23atMlut7e1tdXX19fW1lZUVMyaNUvq5UZWD+rs7Dx+/HhVVZXySOAOmMBnH5fLtWPHjvDw8JUrV3Z1dZHCrq6ulStXhoeH79ixg1xbl1kZRa/X834hUbjkCe+DPyW2zAmvmmhgPGRhEuFncOECJ6KrsMhcjnC5XDRNk/rC9nt6erjXf3irwmi12g0bNrC/6UlxlsaJiIgoLCzk9ejxeFJTU8ltCalldYSLzchctuI+tXnzZtICu96PTLNKRip/rUx+RMJdiA0bNmi12oqKCm4h9xDwuhaen8JdpM5YJacrtzuFpyvj7Yyd8NJNwl24qzfJr+UzPDwcHBxMgq+oqMjKyhJ2xF2pSOrlwD1kXlcP8ng8NE2zvzBUW1ubmpoqbJOtjNWD7iETyTHE4OBgdnY2+1u5Go0mOzv76tWr3DovvfRSYmJicXHxnj17vv76a1J49epVjUbDu4kn/xNbvb29Wq2Wfaqjo0Ov10vtyAuMYZi2trZnnnnGYDCQt8jQ0FDeXmRhG/Y9PTw8XK/Xi57fMi+q6urqZcuWkcfk95u5O3Z3d0dERHDb0el05Cef7XY7dza4TxFSb5o6na6mpkZ4e4PdsbGxMSkpad++fTKTzP4sGBvw1atXbTbbyZMnlTSrZKRKcozUiIS7EO3t7WR1bW4h9xDwGhc9P4W7CM9Yhacr88uUoPx0ZcTOWGGD4/rJc5ldRE91XjsvvfRSeXk5wzDPPPPMkSNHSKHwRTSFPdrtdj8/P3azq6tLmMO4lXnTixxzN5vg/8f8+OOPhYWFjY2NpaWlpKS0tLSxsXHjxo0//vgjW+2zzz47dOjQ4sWLR0ZGiouLueu7cK+hTyFhYBRFZWdnP/HEE42NjWazua6uTrgXu0SK2Ww2m83t7e3smmDKcS+5kA/43G/3Dg0NBQcHc+uTVWGio6OjoqJ4s8E+RYhebv7Vr361Y8eO9evXOxwOqX0ff/zx8vLyiooK8hS7JA9bmV2ShxtwSEhIdHS0n5+fcLUeYbNeRyrTqcIRiQoODtZoNP7+/txCmQtlouencBepM1al05WSOGPVo+RUJ5fLrly50tLSwk6O1xfRZHqE6WwCeWnDhg00TRcXFzscDm65w+EoKiqiaZr7HSEWd2UUvV5vNpu5z3r9HEOJLXPCqyYamOjCJMLuhAucjOtzjMfjiYiI4P6cMO/bVuXl5fLftprYU0899VRqaqrM98rYxWYImSV5DAYD+1mTYZg9e/bIXBDjNis/UvlOvY6IrSYs4e0oPAS8OsLzU7gLF3vGKjldmV9+7FByujLSLyVhg1P1OYZRsJaP2+0ODw/ft2/f888/T0qUrFQ0NDTk4+PDvaCnvMfJXCvD6kF3uYnkmNzcXPLNUVG9vb25ubmM7MooO3bsSElJaW9vt9ls5I84JTlGuMwJw1muRiYw4cIkvPVRGLEFTkTPb253VquV/cze2Ni4aNEibk32v0YcDsexY8e8/tcI7ymp/48R3vygaVr0/2OEi80wskvysP8fMzAwcOTIkfDw8ObmZiXNyo9UvlOvI2Krec0xwkPQ3d0tfPdhz0/hLlJnrJLTlRHkGK+nK6PgpTSuHMNtXGYXJWv5rFq1Kjg4+PPPP2dLRFf34b2OUlJSCgoK+vv7u7q60tLSxtVjQUFBVlaW1Wq1WCxJSUnkYp3UywSrB91DJn4/xiuZlVE8Hs+WLVsiIiK0Wm12drbD4fCaY2iJZU6Yn5er4f0jHpfowiTc9VEYsQVOpM5vtju3263VaslLevPmzVu3buXVJO/afn5+iYmJdXV1UqPj6RVb/4bc/BDdq7KyknfPn8VbbIaQWpKH+Tlb+Pn5JSUlcT+aeG1WZqTynXodEVvNa44RHoIvvvhi8eLFwmCkdpE6Y5WcrowgJUz4dJVqUGY2hI3L7KJkLZ+amhqaprlhi76ImF++jrq7u5ctW0bT9MKFC8vLy8fVo8vlWr9+fUREhNFoNJlMUn9UEWT1IJ1OFx8fj9WD7nIq5pgpJPOOfGdt2rSJ3DFOSEg4efLknQ7nvsY7BG63OzY29tChQ8p3mSp37ek6LclkXLgbaFS4xXMf2bNnD7mBefbs2Tsdy/2Odwj8/f2PHDnyj//4j8p3AYAph99dnpSZM2c+9thjdzoKECefYADgNkCOAQAAtcxgGOZOxwAAANMTPscAAIBakGMAAEAtyDEAAKAW5BgAAFALcgwAAKgFOQYAANSCHAMAAGpBjgEAALUgxwAAgFqQYwAAQC3IMQAAoBbkGAAAUAtyDAAAqAU5BgAA1DKRHHP27NnnnnsuJCRk9uzZ69atczqdUx4WAABMAxPJMRkZGUajsbOzs62tze12b9iwYcrDAgCAaWDca5TdvHmzsrJy7dq1QUFBFEV99913GRkZ58+fVyc8AAC4h01qHcxbt25t27atv7//8OHDUxgTAABMDxO/5//nP/9Zp9O1tLR89NFHUxgQAABMGxPPMenp6SdOnHA4HFVVVVMXDwAATB/er5VFRkayjy9dusR79quvvtq2bdvp06e91gQAgPuNxmsNs9nM3bx165bZbH7sscfIZnx8vN1uF60JAAD3Oe85Jjo6mrs5Nja2dOnSgYGBsLAwiqK6uroeeOAB0ZoAAHCfG/f9GH9///T09I0bN164cOHMmTMlJSX5+fkqBAYAAPe8idzz/+STTyiKWrRoUWZm5qpVq377299OdVQAADAdTOr/YwAAAGTgNzEBAEAtyDEAAKAW5BgAAFALcgwAAKhFaY65dOnSzJkzv/nmG27hm2++GRAQQH4Q0+l07ty5czKhcFvo6+sjv+s8sd3vNn19fTME9u/fL7PL1M7n5OtP4IhM0iTPB3kTbvBuPs0A7kaMMuXl5aGhoRs2bGBLHA6Hj4+P2Wz2eDwMw/T29tI0rbA1UdwWJtDa5ANQD4nN/Utk3uR3mXynU1jf7XZPJp7xmuT5oLzx27MjwP1J6eeYo0ePHjx4sKam5tatW6TE5XLpdLqHH37Y19dXtQw4rfj/0j03b/7+/nc6BAC4xyjKMT/++KPNZlu9enVSUlJdXR1FUZcvX46NjXW5XDNmzDh8+LDT6eRuUhR18+bNdevWBQUFzZ0799133x0dHSVXJ3bu3BkZGRkVFfXxxx9zuxC2QFHU/v374+LiZs2a9corr7ArOp86dWrJkiUBAQGRkZErVqy4cOGC1O48JIDdu3fPnj07LCxszZo1N27cYMt5gQnjZ3t//PHHg4KCoqOjX3jhhR9++EGqUAnS9d69e+Pi4sLCwlavXk2GqWQ+pSKXms/r16+/9tprkZGRMTEx7733Hjsi0frClnkXly5evPjrX/86KCgoLi5u79695IeFZMrVOx+kjhRL9IThUTi9Sk4zAOBSlGOOHDmyatUqiqJyc3OPHj1KUdSsWbM6OzvJ9Z/c3NyQkBDuJkVRpaWlw8PD7e3t9fX1jY2NlZWVFEW5XK7Ozk6LxVJVVZWWlsbtQtiCy+Uym83Nzc0tLS12u72kpITUbGtrW79+fX9/v8ViMRqNhYWForuLcrlcLS0tra2tra2tbW1tZWVlbDkvMNH4KYrKzMzMz8+3Wq1NTU1paWlarVaqUCGXy9Xe3k6GabVat27dKjocqXikplTYwqZNm+x2e1tbW319fW1tbUVFhdf5lzpYFEUVFhb6+fl1d3c3NDR8+umnXsvVOx+kZoYlesLwKJxehacZAPz/lFxQS0hIsFgsDMMMDw/r9fqhoSFGcGGatxkREeFyuchjs9mckpLS29tLUdTg4KBUL7zr7xRFkY4Yhmlubo6Pjxfu0t3dPWfOHNEARNunKMpqtZLN6urq5ORktpwXmDB+hmEGBwc1Gg3vtoRooWjXERyFhYXCYTY1NbHD9DqfUpFzO2Vb8Hg8NE339PSQzdra2tTUVJn6wpZ5rWm1Wra16urq0NBQmXLR+KfqfBCdGSnsCTPh6cX9GIBx8f67y6dOnaJp+qGHHqIoKiAgID09vbq6es2aNTK7XLlyxeFwxMbGks2xsTGNRkNRFE3T7MUTr2iaZi/OGAyGwcFB8vjbb7/dsmVLR0fHyMjI2NjY2NiYwgYpitJqtTExMeTxggULrFYr2xc3MKn4w8LCcnJyUlNTly1bZjAYkpOTn3zySdFCYdc6nY679oFOpxMO02g0ssPkkopHGLmUgYGBkZGRuLg4duzkDVSGTMsDAwNjY2Pc1uTL1TsfZGaG5fWEmfz0AoAU7znmyJEjHR0d7PpjbrfbbrfL5xi32+3j49Pa2sq+Vn18fEZGRiYfLkVR2dnZBQUFlZWVWq3WZrOlp6dPSbNcovGTB5999tnp06ctFovdbi8uLl66dOmBAwdEC3lt+vj4THjtA5l47gnqnQ9KZsbrCXOvTy/A3cxLjhkdHf38888bGxsNBgMpGRsbW7x48cWLF2X2ioqK0ul0g4ODjzzyCFvY19c3+XAvXbpkt9t/97vfkU2HwzGu3d1u9/nz58lHGe7KNzyi8bMeffTRRx99lKKojIyMzMxMkk5EC6eKfDxK6PV6Pz+/v/3tb+RDRmdnJ/tn+8Ra8/Hx6evrmzt3LmlNvly988HrzCg5YSY/vQAgxcvfaw0NDeHh4Y899lj0z2JiYp555pljx47xakZERLjd7nPnzpHN3NzcjRs3fv/99xcvXty9e/f27du9hsJrQVRkZGR4ePgf//hHp9N57tw5k8k0rt0piiouLr5w4cL3339vMpkyMzOlqonG/8MPPzz33HP/8z//c/ny5fPnzx88eDAxMVG0ULTNm78k/AaUzGxMcj59fX1feumloqKi8+fPk7GTL3HI9CjD19c3MzOzqKior6+PtCZfPvn4Zci3LHXChIeHu93us2fPkqOgPDzlswQAFOXtnn9eXt6WLVt4hZ988klSUpLw5qfJZNLpdFVVVQzDuN3uoqIio9Go0+kyMjJ6enqU3CxlWxB+oYC9e9zY2JicnKzVaufMmVNcXMyWy+zONkLT9K5du/R6fWhoaF5e3vDwMCNxF1cYP8MwIyMjJpMpISHBz89Pr9fn5ub29/eLFgq7Fs78vn37ZIbpdT6lIhedT4ZhXC7X+vXrIyIijEajyWQS/Q9QmQnklfT392dmZtI0HRsbu2vXLjZsqXL1zgfRmeGSOmFKSkomNr3cWQUAedNz/Zi+vr5FixZdu3bNayFM3tmzZ5944omffvpJYTkA3D+m7b3NydxvgHExm83x8fHKywHg/uH9e2X3Ipqma2pq7nQU09n27dsNBkNWVlZPT8/WrVvfeecd+XIAuD9Nz2tlonCtbAp98803RUVFFovlgQceKCwsfOONN+TLAeD+dB/lGAAAuM2m7f0YAAC445BjAABALcgxAACgFuQYAABQC3IMAACoBTkGAADUghwDAABqQY4BAAC1IMcAAIBakGMAAEAtyDEAAKAW5BgAAFALcgwAAKgFOQYAANSCHAMAAGpBjgEAALUgxwAAgFqQYwAAQC3IMQAAoBbkGAAAUAtyDAAAqAU5BgAA1IIcAwAAakGOAQAAtSDHAACAWpBjAABALcgxAACgFuQYAABQC3IMAACoBTkGAADUghwDAABqQY4BAAC1IMcAAIBakGMAAEAtyDEAAKAW5BgAAFALcgwAAKgFOQYAANSCHAMAAGpBjgEAALUgxwAAgFqQYwAAQC3IMQAAoBbkGAAAUAtyDAAAqAU5BgAA1IIcAwAAakGOAQAAtSDHAACAWpBjAABALcgxAACgFuQYAABQC3IMAACoBTkGAADUghwDAABqQY4BAAC1IMcAAIBakGMAAEAtyDEAAKAW5BgAAFALcgwAAKgFOQYAANSCHAMAAGpBjgEAALUgxwAAgFqQYwAAQC3/H9/PkqWMk0EAAAAAAElFTkSuQmCC)

Screenshot: veggie-hotels.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 22 March, 2020 06:19 GMT
Vulnerability Verified: 22 March, 2020 06:33 GMT
Website Operator Notified: 22 March, 2020 06:33 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 22 March, 2020 06:33 GMT
Vulnerability Fixed: 24 March, 2020 06:00 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 21 April, 2020 06:19 GMT