logo
DATABASE RESOURCES PRICING ABOUT US

bestflashgames.com Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1159479 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[bestflashgames.com](<https://www.bestflashgames.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **mominroaim ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![bestflashgames.com vulnerability](/twimages/screen-1159479.jpg) **Mirror:** [Click here to view the mirror](<http://1159479.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 12 May, 2020 11:13 GMT ---|--- Vulnerability Verified:| 12 May, 2020 11:22 GMT Website Operator Notified:| 12 May, 2020 11:22 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 12 May, 2020 11:22 GMT