Lucene search

K
openbugbountyMetamorfosecOBB:1148591
HistoryApr 22, 2020 - 12:27 a.m.

pflege-praevention.de Cross Site Scripting vulnerability

2020-04-2200:27:00
metamorfosec
www.openbugbounty.org
12

Open Bug Bounty ID: OBB-1148591

Security Researcher metamorfosec Helped patch 1963 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affectingpflege-praevention.de
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: pflege-praevention.de
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **metamorfosec Helped patch 1963 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 31 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAATJklEQVR4nO2dfUxT1/vAr1CgQHkrpfI6XlR0zLCOMUTHHNHFOUZIdYgZY8qQYCXAGGOMEuIYTjQITpEQ/tBF0alZNsKIUeeY2yrpFBUrdogdEqilMAQU1rFaC/f7x8nv5v7uWwtScez5/NVz7nPP8zznPLdP77nnni7AcRwDAAAAABtgN9cGAAAAAPMWyDEAAACArYAcAwAAANgKyDEAAACArYAcAwAAANgKyDEAAACArXh2c0xoaOjNmzfZigBAB4Lk6XDz5s0dO3bMtRXAv4NnNMfcunVramrqxRdfZCwCAB0IkqdGenp6SEjIXFsB/DuwkGP6+vrc3NwYD42Nje3Zs4et+IQ0NzcnJSWxFeecjz76yNnZef/+/Wyd89+BPO4c0TJj+vr6vLy8rJEkguTBgwcffPCBj49PQEDAp59++vjx4+lqRF5Yr3oWsaYPZ3ytzXiAyBpHRkY6Ojry8/PpDR46dGjRokVOTk4vvfTSuXPnKKoX/B/29vahoaG7du2anJykHCI4ePAgOmRvb3/p0iVKU8S4UM4NCgqSy+XEiNP9pYzpoUOHQkNDXV1dV6xY8dNPPzFaS2/WoqccSi16NA/BOent7RUIBNYc4pCcATExMRcuXGArzi3Dw8N2dnYqlaqnp2cWXf6XQhl3o9E46+17enpaI0kESVJSUmpqqk6n6+rqiouLKy4unq5G5JH1qmcXi30442ttVk5k+1xTUxMSEtLS0jI0NHTy5EmhUKhQKCgtGI1Go9E4MTGhUqliYmLKy8sphwjMZjM6hGFYWFiYwWAgN0WMC6VZtVq9atWq0tJSNn/J59bU1ISFhV28eHF4ePjbb78ViUStra3WNGuNp2xKLXo0/3gWc4xer/f09DSZTIzFOYf8HQQ5xtadYOXlRwTJxMREYGAgcQG3tbUtXrx4Whp1Ol1UVBT6EBMTMwObbc2zk2OIvsJx3N/f/+LFi8QpBw4cSExM5FDd2toaERHBbVVvb6+Li0tUVJRMJiNXUnIM+RSlUrls2TK2o+RzKQbX19cTBnM3O11PKQZzezT/sOp5zMGDB0NDQ729vd9///2xsTEMw8bGxkJCQgwGw4IFC44dO0Yuohmkffv2LVy40MvLa+vWrf/88w9q5+rVq6+99pqbm1tAQMA777xz+/ZtRnXNzc3r1q1zcHCgFDds2LBv3z5UefPmTScnJ2QMhmHbt2//5JNPuAWWLFnCfTrZBnTDS/diZGSE8PS7774jn/Lo0aNt27a5ubkFBwd/9tlnaB4Aw7CBgYG3337bzc0tNDS0urqauClmk6fAZgmq37Nnj4+Pj5+f35EjR1APr1y50tnZ2cfHZ9OmTf39/Ry6Nm/evHv3bkLRypUrjx07xiiJdFVXV4eGhnp5eb333nuMYUCZJfj777+3b9/u4+MTFBT0+eefT05OsrVDob+//80333Rzc1u6dOnJkyct9jA5SJydne/du+fq6orqu7u7/f39MatjD8OwgICA69evow9XrlxBlT/88AObPF2AUdfk5KRcLl+4cKGrq+umTZtGRkYYB5E8U8c47pQ+Z7ONLRLIcIw12SS6RnpfjY2N6fX6uLg44tDq1as7Ozs5eozP55vNZu5exTDMzs6uoaHh6NGjP/74o0VhDMMcHR1NJpNFMbrBGRkZtbW1FpudgacUpuvRvx3LOcZgMKhUKqVS2dbWptfri4uLMQzz8PDo6upCt5NpaWnk4oYNGwwGQ1tb27Vr165du9be3l5ZWYmaSkxMTE9P12q1ra2tcXFxfD6fUSPbw5jExMSWlhZUeebMmampqfPnz6NiS0tLQkICt4BUKuU+ne443Qtvb2+yp2T58vLyiYmJjo6O8+fPKxSK+vp6VJ+Tk+Po6Njd3d3S0tLQ0GBRnnEIGPvTYDB0dXWp1eqjR4+ioG9vb8/KyhocHFSr1YGBgTk5ORy6UlJSmpqakMDAwIBKpZJKpWxWGQyGjo4OFAZarbakpASjhQHF7Ly8PL1e397efv78+ebm5rq6OrZ2KOTk5Li7u3d2dp49e5acYzh6jPGJ3Z07dwoLC6uqqjD22POhwTgE6enpa9euRd+nFK5evbp27dr09HSihlFXZWVlS0tLS0uLRqPx9/cnvpXog0jAOO70Pme0jS0SyHCMNdkk7lEmTuHz+cTvQgzD3N3dx8fHGYUxDLt//35paalUKmUTIPPCCy+UlZVlZGQw/iIh8+DBg507d2ZmZlpsk26wg4NDcHCwxWan6ykj1ns0H+C+zUGzh+Pj46ioVCrDwsKIQ4xzZegUrVaL6hsbG6Ojo3EcHx0d5fF4jHPNWq02JCQEfTYYDAKBYHR0lF7U6/UuLi6ohZiYmIKCgtTUVKTR3d3dZDJxC2i1Wu7T6Y7TvcDZ58pEIhExRYOmm3EcN5vNfD6/p6eHaIe4KWaUZxsCuiWonugoOt3d3b6+vhy6JiYmULfgOF5XV5eUlMQmSQmD1tZWxjAgfzabzQKBgHC8ubk5NjaWox0C1GNkfy32GCVmEDqdLiws7PTp0zhn7OloMHamwWCoqKgQCoUpKSkajQZVajSalJQUoVBYUVFBGMamSywWt7e3Uyrpg2jxOsJpgcdoGxkiEqyJWMa4YhtlRgFET08Pef4HNSsSiUQikVAo5PP5MpkM9RL5ECInJ4fSrNlsjo2N3bJlC870eINo1s7Obv369RxWEeeSDxUWFqIWyFHN1qw1nnLPlXF7NP/gWUxCAoGAmADx9/cfHR21eAqfzw8KCkKfly1bptVqMQzz8vJKTk6OjY1ds2aNv79/dHT066+/TjSrVCrR5wsXLsTExBATSuSin59feHi4UqmMiIjQ6/U7d+4MDw+fnJxsaWl54403HBwcuAWCgoK4T7fGCzYePHgwPDxMLOicmpri8XgYhg0NDU1NTYWGhhLtcMtjGEb+KX3//n0OSwQCAWU5yo0bN4qKijo7O00m09TU1NTUFIcuZ2fnhISEpqam3NzcxsbG9PR0DqvIYRAYGGgxDIaGhkwmE9lxdN1abGdoaAjDMLK/FnuMEjOI5OTk/Pz8zZs3Y5yxFxAQwO0IwtXVVS6Xy2SyjIyMiIgItMQoIiIiMTGxp6fHw8ODkGTUNTY2Njo6GhkZSW+ZPogEVkYgo22MkUCGe6ynu8yJx+NRJr7IDSJcXFxUKhWGYXZ2dmKx2N7enn6IKFLat7e3b2hokEgkGzdulEgkjM1iGNbT05Ofn3/w4MEPP/zQeoNLS0vz8/N1Ot369estNmuNp9bA4dE8Y9pd8yScOnXq+vXrarVar9cXFBSsWrXq0KFDGIbZ29v7+fkhGe5VywkJCS0tLT09PYmJiR4eHhKJRKFQkGe6uAUsnj5jjEajnZ3dtWvXiGizs+Oah+SQJ19s00UqlWZmZtbX1/P5fOKa4dCVkpJSW1ublpbW1tbW2NhoMBim5cXThMML+kTZwMBAR0fHb7/9RtSwxR59cgzldTp3797duXOnQqEoLy9HNeXl5VVVVdnZ2eXl5YsWLeLQ9cUXX2AYRv5WnV3otjFGApnpRiw3aCbt8ePHxG+18fFxd3d3soydnR1bRuc4RLBkyZKKioqsrKyzZ8+ynRsQEFBTU5ORkYFyDJq3mJycJHreYDCgBEY22MPDw8PDY2hoiJzb2Jq16CmHUis9mm9w3+bQJ8TYVnSw3eM3NTUR9/hkVCpVYGAgpdJsNotEImKChVLEcVypVMbExCQlJZ09exbH8bq6ury8PF9fX71eb42AxdPJ7rB5wTZXJhAI6JMhaOant7cXFckzP4zydNgsod+SDw0N8Xg8oqhSqSzqMhqNQqHwwIEDGzdu5JC0MgysmStja4eAMlfW1NTE7QU9SFAlpYYMOfasnCuTyWQCgaCgoGB4eJhcPzw8nJ+fLxAIyMuEGHWJxWKVSkU5yjivYvE6opxFt40tEqyJWItTYWzLwCirrWpqarhXW83sUHx8fGxsLMe6ssuXL5MnYMViMbEiGcfxuro6YtbL39//l19+IQ5VVVVxTIiRm+X2lFupRY/mHzPPMQaDgcfjEfO/RBFdG8nJyTqdTq1WSySSsrIyHMc7OzvXr1+PVqNrtdrMzEzywKCZWYVCsXz5cqKSUkSIxWKxWIzkdTqdu7u7RCKxXoD7KDGNzuYFuU/Gx8d5PF5XVxdayy+TyWJjY9Gv18rKSrT2H8fx5ORkqVTa29urVqsjIyOJDmSTpw8BoyWMV6ZYLK6rq3v48KFGo5FKpdboSk1NdXd3/+abbzgkrQwDilhmZmZSUpJWq1Wr1VFRUTU1Ndw5huh8qVRK9pfbC8Ygwf//WybcsWcNaWlpxA8FOr29vWlpady6KioqYmJiOjo6dDpdTk4OeqPCYo5hjEDKpcdoG2MkWBOxjHFF1qjVavl8Pr0TiLdGhoeHT58+bfGtEcohtvdj6A8/BAIB4/sxRqOxs7Nz9erV2dnZhHxtbW14eLhCoUAvwQiFQuLbn3g/Zmho6MSJE0KhUKlUWtMst6fcSi16NP+YeY7BcbysrMzFxeXo0aPkYnV1tUAg2Lt3r1gs9vT03LJly8TEBI7jJpOprKwsPDzc0dFRLBanpaUNDg5StBQWFpaUlBDtU4qI1NTU5ORkohgdHU2R4RbgOEr/sUb3giJWXFxM9IDRaMzPzw8MDHRxcUlISCB+Rw8ODiYmJgoEgpCQkL179xIdyCbPOAR0SxgvWoVCER0dzefzfX19CwoKrNHV1NQkEAgI7xglrQwD+rPorKwskUgUGBhYVlZmNputvB/S6XTr1q0TCATh4eFVVVXcXjAGCcVCjtibddh0mc3moqIikUjE5/OlUim65+DOMWwRiNMuPTpskWAxYtmSAaHRaDTy+XzGxQXoW9vR0VEikaCpArpfdFA2pXDgwAG2s+rr6ynP/AnEYnFWVhaxqASxf//+kJAQR0fH5cuXNzY2UgxGh6Kiosi3Jhab5fCUW6lFj+YfFnLMDOAIJouEh4dfvnyZrfg0eRIvOOjq6hKLxc+CJfOGOQwSm/Isj3teXt6aNWvm2grg38FTfeZvkTt37nAU5wEqlSosLGyurZhXzL8gefapqqp6kpUpwH8Km6wawnH83Xff/fPPP62Un99bsu/atevIkSP379+/cuVKSUmJTCaba4sA4IlwcHB45ZVX5toK4N+BTXLMggULHB0dCwsLrRGe91uyx8fH19XVBQYGpqWl5eXlbd26da4tAgAAeEoswHHcgsSCBfTKzs7O559/Hn3++uuvy8vLOzs7dTrd8uXL//rrLwzDbty4kZCQMDAwYNGC3bt3Dw4OopcVZkxfXx+hmo2xsbG6ujq5XP4kigAAAADrsXwfg1bvdXV1eXp6os+5ubl79+4lBCorK0tKSijvlwmFQoPBYI0Fs/LfMMHBwcPDw9wyDx8+rKioeEJFAAAAgPVYzjFOTk5OTk5oXz/0WS6XNzY29vX1YRh27tw5g8GAdsrj8Xjh4eHTUj8wMKDRaOLj42diO83OJ28EAAAAmEVm8jzGz88vPT0d7QK7d+/e4uJidBNDbPTNDXkrcvI2/s/CjugAAADALDLDZ/7FxcUnT578/vvve3t7ybuac0PfBZ08UfYs7IgOAAAAzCZWvkdD31pKJpPx+fy6ujo2efIbZIy7oJO3ZH8Gd0QHAAAAnpCZr13Ozs7GMCwjI8Ma4YiICJPJ1NPTI5fLif8oJG/JTuyI/vHHH1dXV//6668Yhj2FHdG7u7tNJlNERIQ1XgAAAADTYuY5xt3dncfjWfmkvby8XKFQZGdn3717l6ikrCg7derU4cOHIyMjTSZTQUFBbm4uqrfpjuhod0JiR3QAAABgFnlK/w4il8s1Go1YLJZIJDt27MAwbHJy8syZM5RVyy+//PLWrVvlcvlXX33V1NTk4eEhFAqnuwWA0Wi8d+8e+qzRaJ577jlGsR07dkgkEl9fX41GAy/NAAAA2AJb5Riz2Uz5bzhvb+8vv/xSrVaj92aUSqWvry/xP4m3b99+6623fv7555GRkXv37tXW1qL/hsvPz8/Kyrp161Z/f39ubu6lS5es0V5QUNDf3//777+XlZUlJiaiSpFIZDQa//jjD1Q0GAxqtbq6utrb23u2vAYAAADI2CrHqFQqxhuI4ODg48ePY7SJssWLF8fGxspkMvT3tEaj8fDhwxiGFRUVxcfHr1mzZvHixTqdzpoHJwKBIDo6OioqKi4uLjIysqioCNW7urqWlpZKJBK0dvn48ePBwcGz4iwAAADAiOW9ZGbAo0ePli1bVlpaum3bNjaZpUuXNjQ0rFixYnZVW7OpDAAAAPB0sMne/k5OTidOnHj11Vc5ZGBLdgAAgHmPrebKuBMMAAAA8F/gKa0rAwAAAP6D2OR5DAAAAABgcB8DAAAA2A7IMQAAAICtgBwDAAAA2ArIMQAAAICtgBwDAAAA2ArIMQAAAICtgBwDAAAA2ArIMQAAAICtgBwDAAAA2ArIMQAAAICtgBwDAAAA2ArIMQAAAICtgBwDAAAA2ArIMQAAAICtgBwDAAAA2Ir/ARygapgOMwylAAAAAElFTkSuQmCC)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: pflege-praevention.de  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 22 April, 2020 00:27 GMT
Vulnerability Verified: 22 April, 2020 00:41 GMT
Website Operator Notified: 22 April, 2020 00:41 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 22 April, 2020 00:41 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 21 July, 2020 00:27 GMT