logo
DATABASE RESOURCES PRICING ABOUT US

bienculonas.com Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1159499 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[bienculonas.com](<https://bienculonas.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **mominroaim ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![bienculonas.com vulnerability](/twimages/screen-1159499.jpg) **Mirror:** [Click here to view the mirror](<http://1159499.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 12 May, 2020 11:52 GMT ---|--- Vulnerability Verified:| 12 May, 2020 12:07 GMT Website Operator Notified:| 12 May, 2020 12:07 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 12 May, 2020 12:07 GMT