Open Bug Bounty ID: OBB-1157396
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:
      a. verified the vulnerability and confirmed its existence;
      b. notified the website operator about its existence.
Affected Website: |
jamaicaobserver.com |
Open Bug Bounty Program: |
Create your bounty program now. It’s open and free. |
Vulnerable Application: |
Custom Code |
Vulnerability Type: |
XSS (Cross Site Scripting) / CWE-79 |
CVSSv3 Score: |
6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
Disclosure Standard: |
Coordinated Disclosure based on ISO 29147 guidelines |
Discovered and Reported by: |
ELProfesor |
Remediation Guide: |
OWASP XSS Prevention Cheat Sheet |
Export Vulnerability Data: |
Bugzilla Vulnerability Data |
JIRA Vulnerability Data [ Configuration ] |
|
Mantis Vulnerability Data |
|
Splunk Vulnerability Data |
|
XML Vulnerability Data [ XSD ] |
|
Vulnerable URL:
![](data:image/png;base64, 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)
Screenshot: ![jamaicaobserver.com vulnerability](/twimages/screen-1157396.jpg)
Mirror: Click here to view the mirror
Coordinated Disclosure Timeline
Vulnerability Reported: |
7 May, 2020 17:34 GMT |
Vulnerability Verified: |
7 May, 2020 17:49 GMT |
Website Operator Notified: |
7 May, 2020 17:49 GMT |
a. Using the ISO 29147 guidelines |
![](/images/done.png) |
— |
— |
b. Using publicly available security contacts |
![](/images/done.png) |
c. Using Open Bug Bounty notification framework |
![](/images/done.png) |
d. Using security contacts provided by the researcher |
![](/images/done.png) |
Public Report Published |
|
[without any technical details]: |
7 May, 2020 17:49 GMT |