oldmoney.dk Cross Site Scripting vulnerability

oldmoney.dk Cross Site Scripting vulnerability. Open Bug Bounty ID: OBB-1151487. Security Researcher **roker Helped patch 50 vulnerabilities Received 1 Coordinated Disclosure badges Received 4 recommendations ** found a security vulnerability affecting **[oldmoney.dk](<http://www.oldmoney.dk>)** website and its users. Verified the vulnerability and confirmed its existence. Notified the website operator about its existence. Affected Website: **[oldmoney.dk](<http://www.oldmoney.dk>)**. Vulnerable Application: Custom Code. Vulnerability Type: **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79. CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]. Disclosure Standard: Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines. Discovered and Reported by: **roker Helped patch 50 vulnerabilities Received 1 Coordinated Disclosure badges Received 4 recommendations **. Remediation Guide: **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)**. Export Vulnerability Data: Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ]