logo
DATABASE RESOURCES PRICING ABOUT US

schoolswebdirectory.co.uk Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1159781 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[schoolswebdirectory.co.uk](<http://schoolswebdirectory.co.uk>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![schoolswebdirectory.co.uk vulnerability](/twimages/screen-1159781.jpg) **Mirror:** [Click here to view the mirror](<http://1159781.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 13 May, 2020 06:36 GMT ---|--- Vulnerability Verified:| 15 May, 2020 09:23 GMT Website Operator Notified:| 15 May, 2020 09:23 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 15 May, 2020 09:23 GMT