logo
DATABASE RESOURCES PRICING ABOUT US

app.elderlyordisabledliving.com Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1158143 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[app.elderlyordisabledliving.com](<https://app.elderlyordisabledliving.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Implosion ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- **Screenshot:** ![app.elderlyordisabledliving.com vulnerability](/twimages/screen-1158143.jpg) **Mirror:** [Click here to view the mirror](<http://1158143.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 9 May, 2020 19:09 GMT ---|--- Vulnerability Verified:| 9 May, 2020 19:19 GMT Website Operator Notified:| 9 May, 2020 19:19 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 9 May, 2020 19:19 GMT