logo
DATABASE RESOURCES PRICING ABOUT US

viapost.fr Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1159516 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[viapost.fr](<https://www.viapost.fr>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **gdattacker ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://1159516.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 12 May, 2020 12:01 GMT ---|--- Vulnerability Verified:| 12 May, 2020 12:13 GMT Website Operator Notified:| 12 May, 2020 12:13 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 12 May, 2020 12:13 GMT