logo
DATABASE RESOURCES PRICING ABOUT US

ksa.motory.com Cross Site Scripting vulnerability OBB-1178878

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[ksa.motory.com](<https://ksa.motory.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **ronygigi ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABfCAIAAACxwoBIAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAfkElEQVR4nO2df1AT2R3A90IOQgjhhyECxhMcD61DOeowGbyiRx3njkkzTEREh9LTtgw6DHJcRh1ES1PtqYdex3KWWkdn0LGec2MZ6jgMdXK2w1nGeidGjFyMDgJCQAQKGGmgwPaPN93Z7r592YREEvx+/mJ33/u+7/f7vuRl326+3zdomqYAAAAAwA9I5lsBAAAAYMECawwAAADgL2CNAQAAAPwFrDEAAACAv4A1BgAAAPAXsMYAAAAA/gLWGAAAAMBfwBoDAAAA+Av3a8wbOCIjI/2qVnd3tw+H+Otf/xoVFTU8PMyc+eEPf3jgwAGKol68ePHRRx8tW7YsPDx85cqVn3766czMDGpDuOQFvrXI01GY85wG7MOxsbGjR4/OZZTgwiMrOI3F+4rNs2fPIiMjv/vuO+bMn/70p5UrV84lrgIKjpc+/vjj8PDw8+fPe9TLO98CgQvtDpfL5XK5bDZbdHQ0+ttutysUCrcd54jL5fKhNJ1OV15ejv5uaGhITEx0Op00Tefn5xsMBpvNNjg4aDabs7Ozb9++jZoRLnlBV1fXK3AaYRTkT34Dxs8eaejb2ZkXPJ0Rtslez2ZFRcWHH37IHKalpdXX13shJ2BhvDQ0NCSRSCwWy/T0tPhe9Kv6TwFeGe7XGERXV1d0dDTzd9AFgc1mk8vlnZ2d09PTKSkp6B97YmJCKpWOjo7y2xMuece8rzFuGwTjtM6FudjrdV+Hw6FQKLq6umiabmpqWr58uZiP4GDEaxe9bnG44PH+eczvfve75OTkRYsW/fSnPx0bG2POT05O/uIXv4iMjFy2bNmvfvWrmZkZdC989OjRuLi4hISEc+fOYZuxhXNun7/55pt169ZFRkYuWbJk8+bN7N0GpsHatWvDw8Pj4uK2bNnS19fHabBy5cqSkpLKysozZ84olcrt27dTFDU7O0tRlFQq5VtHuMSwdevWTz75hDlcu3bt+fPn+ZtRMTExnI6ozWeffZacnBwTE/OTn/yEcSDWLVgHEkz+9NNPFy9eHBMTs3379n//+998f3I0oShqbGwsKSnJ6XS+8cYb58+f//3vf//BBx8wzQ4cOIA8xulFtgUhJOrly5c7d+6Mi4tbunTpr3/9a7alfO9hPcCwadOm48ePo7/v3bsXFhbG6LBz5869e/cSgo3vKwoXb5xNRbavhGYNS0JCwo4dO2pqaiiKOnbsWGVlZUhIiKfe4DAzM7N///7FixdHRERs2bIF7Qljw8PtZGFDWshA/qQwCg8PD3sXTnzfAsGOl2uM0+m0WCytra23b992OByVlZXMpUOHDk1MTLS3tzc3N7e0tJw+fRq1t9lsVqu1vr4+KytLqJkQer1+x44dPT09N2/ezMrKkslknAZtbW0lJSUDAwNWq1Wj0ZSVlfGFVFdX37hxo6qqqra2Fp2JiIjQ6XTbtm37xz/+8fLlS3ZjwiWGgoKCxsZG9Hd/f7/FYjEYDGS/MTidzvb2duTAnp6eqqoqdF7ILXwHCpnsdDq//R9tbW3o48wtUVFRNptNoVC4XK6ioiKDwdDS0vLixQt09erVq3l5eZ7aghASVV5e7nA42trampubr169WldX59ZjHA8w6PV6s9mM/r527drs7GxzczM6NJvNOp2O4FWsr8jxxvEV5WEwV1ZWXrp06S9/+UtXV9eOHTvQSU+9waampsZsNpvNZrvdnpiY2NHRQRHDgzBZQiEtPiwRixYt8i6c+L4Fgh6R9zucvTKKosbHx9Fha2vr8uXLmZYqlQo96qBp2mKxaLVa1H5kZIQtkN+MMxxzvzwyMiKVSsU/AHj8+HF8fDz20rZt29566y32mfHx8crKypSUFKlUumLFCpPJxOxdEC4hJiYmlEplT08PTdN1dXW5ubk0706f8Rv7PMeBN2/eZByIdQvWgViTUUukEk3TDQ0NGRkZ7NH56rG1Yl/KzMy8cuUKc15ox5xgC0HU9PS0QqHo7OxEDa5evZqZmUn2HsEDDodDLpcjDbVardFoLCwsRL2USuXU1BTBq3xfYeON4DfaXTDz2bVrl0wmq6urQ4eeeoODWq1ua2sjDMcJD8JkYUNayED+pMw9nPiHQLBD2gsioFAomNvbxMTEkZER9Pe//vWvoaGhpKQkdDg7O4u2mxQKBfs2X6gZlpiYmPz8/MzMzA0bNiQmJmZkZLz33nucNnfv3t23b19HR8fU1NTs7Cza6eJw//795uZmjUbzxz/+cefOnegkutk/evTo5ORkW1ub0Wicnp4+fPgw+RIiPDxcp9M1Njbu3r27oaGB+U4qBrYDNRoNciDBLRwHEkyWyWRLly5Ff69ataqnp0e8VmwMBsO1a9c2b9587do1nU4XFhbmkS1kUf39/VNTU8nJyYye6AOLAN8DDAkJCSkpKa2tratXr3Y4HNXV1SkpKTMzM2azeePGjU6nU8irWF+JiTc2HgUzorS0tL6+/uc//zk6HBwc9NQbDGNjYyMjI2lpaZzzQuFBnixsSHsUlkKIDydggeHlGiOEy+WSSCTffvstE4USiWRqakpMM4LYL7744s6dO1ar1eFwGI3Gd9999/PPP2c3MBgMxcXFp0+flslkvb29OTk5fCHl5eVGo3H9+vX5+fkFBQWc/42wsLC1a9fW1tYWFRWxFxLypYKCglOnThUVFd2+fbuhoYHkGhF45BYxJs+FvLw8tPtx7do1j5ZPv4oSQqfTmc3mzs5OvV4fFRWVnp7e0tKCNso8DTYKF2979uwRauyFfKVSKZVKffg5ix7qsPE6PPgh7YWBfF5BDAABisj7HcJ7ZZxbeIVCwblzx9788pu57YKwWCwajYZ9ZnBwUCqVshvwtxSuXLny1ltvTUxM0DRtMBjKysrQeWYHANHS0sLsHhAuMbhcrtjY2JMnT+bl5aEz4+PjEomEvR2B3SsTciDWLXxvCJnM2f9pbGz0eq+MpunU1FSz2RwdHc2Y47aX0H4OR5TQ7pAY72FpbW3VarW5ublNTU00TdfV1ZWXl8fHxzscDlrYq1hfcUDxRt7PIQczH053T73BQa1WWywW9hlCeLidLH5ICxnIn5S5hxO2IxDU+H6N2bVrV2ZmJvoOWFNTc+jQIWzQ8JtxhmO6dHR05OTk3LhxY2hoqKenp7i4WK/Xc6Sp1eq6urrR0VG73W4wGDj/ORMTE0lJSRcvXkSHdrtdLpe3t7fbbDa1Wn3mzBmHwzE6OtrS0pKamnrkyBGapgmXOBQWFiqVyi+//JI5o9Vqi4uLBwYG7HZ7VlYWUmZ8fFwqldpstunpaYIDsW7BOhBrMvrczM/P7+3ttVqt6enpJpOJLYGtBkey0+mUSqV2u50Zorq6Oi0tje9tL9YYvqji4uLc3Nyenh6r1bpmzZra2lqC98R87qjVarVajTb6e3t7lUpleno62atYX2HjjaMAx1dY+YQniHxzPPIGhyNHjmi12vb29t7e3rKyspaWFlo4PMRMFj+kRYYleY0RE040Lg6BoMb3a4zL5aqoqNBoNHK5XKfTdXZ2Yj8g+M04wzFdpqamTCZTSkpKaGioWq0uKioaGBjgSGtpacnIyJDJZPHx8UajkfOfc+jQIc5j2IqKiuzsbJqmm5qasrOzlUqlXC5PS0s7c+YM04ZwiU1jY6NCoUB3SIjHjx9v2LBBoVCsXr26traWUaayslIul9fX1xMciHUL1oFYk1HLmpoatVodHR394YcfIsXYEhg1+JJNJhNziaZpi8VCURT/R4JerDF8UU6ns6SkRKVSaTQa9vsUWO+JWWMKCwvz8/OZw4yMjKqqKrde5fsKG298Bdi+EhnzWAd64Q0O09PT+/btU6lUMpnMYDAMDQ3RxPBgq4EVyA9pkWFJXmPEhBOCE4dAUPMGTdPztEsHBDovX75UqVQOh0Pkc91XIwoIUiAGXk8gJyYgyPXr17OysnzyieBDUUCQAjHwegJrDIBnbGzs1KlTBQUFASUKCFIgBl5bYI0B8DBPKQJKFBCkQAy8trhZYwIwi7sPVWJnEfdaLD95l/j2gczk5OSf//xnn/yGw4eigCAFYuC1JfjuY5YtWzY0NOQTUaOjo0eOHPGJKIQPdQMAAFgABN8aQ1FUIH8bCmTdAAAAXjGi1hh+/nNysm4Kl6sc7REdP36cn0qdkDmcn4dcZGL5/v7+H//4x5GRkcnJyZ999hn/bRZsFnFswQLxmds9SnpPUdSDBw8WLVr09ddfi5kFAACAoMP9GoPNf+42WTc2V7nT6bx9+zY/lTohczghDzm5TVlZWWho6OPHj81m84ULF/gd+VnEhQoWeJS5XYxuiLGxsby8vGPHjq1bt06kQAAAgCCD/BNNofznNDFZNzb/EkEUIXM4Pw+5mMTy09PTMpmMUaChoQH7e2aCKHbBAvFlCMToxrTR6XSlpaUCjgcAAFgIuM+7LJQrnpCsWyhXOVYUOXM4OWm8UJvBwcHZ2Vm2Am7NpAQKFniRuZ2sG+LAgQPNzc1nz54VKQoAACAY8T63v6+Sdfskc7j/8Id6ExMTDQ0Nly9fLisry8vLi4qKmrOaAAAAgYj7j0uXy/X06VP0t91uf+utt9Dfb7/9tlqt/uqrr27duqXT6dhd1Gp1aGjokydP0KHNZkP3AVhRCQkJcrl8ZGRkyf9ISEiYo1VqtVoikXR3dzMKeC3KH+pJJJKGhoYtW7ZotdqDBw/OURoAAEDAIuorudFo7Ovre/Dggclk0uv1zPm8vDyj0ZiVlcX5UWFISMi2bdsqKiqePn2KehUWFhJEFRUVlZaWPnjwoL+///jx45w6YF4QEhKi1+srKiq6u7vRWNhmKpXK5XI9evSILI2sXmxsrMvlevjwIeF9Mw4ymex73/seRVEnTpw4e/bs/fv30fnJyUmREgAAAIIC92uMQqHQarVr1qzJyspKS0vbt28fcykvL6+9vT0/P5/f6+TJk/Hx8WvWrMnJycnNzS0tLUWiMjIy+KJOnjyZmZmZk5OzYsWKv//97+gtrzly6tSp6enp1NRUvV7PrHAcIiIiDh48mJ6ezry7jIWsXmRk5J49e9asWXPx4kVPlVy5cmVJSUlZWRlFUd3d3SqVylMJAAAAgcyccvt7lKy7u7s7NTWVed35VfLw4cP169c/e/bs1Q8NAADwOjOnx9fBkqzbYrEsX758vrUAAAB47fB+jQnwZN2HDx8+d+7c8+fP//nPf1ZVVe3atWu+Nfo/kpOT7927J3S4YFiodgUCAe5bn6sX4PYCQni/xgR4su7s7Oy6ujqNRlNUVFReXs5JdTO/3L9/f3Z29p133sEeLhgWql2BQID71ufqBbi9AAH3a0x3d/cbLJYuXbp///7//Oc/5GTdH3/8cXh4OPtZ+rJly17lw5h169bduXNncnLy0aNHH330EbYNIc0+O+0//3COXL16NTc3V+hwwbBQ7fItnCAUGWlufeurAPauFIXPpx5iKYhxmwmASRXjcrlQ2q7MzMyDBw8SugwNDUkkEovFMj097bOMBH6AnfqFfInQ0gu0Wu3169eFDhcMC9Uun8POwyQy0tz61lcB7F1Hn089xFLwInavLCwsLCwsLDw8/Pvf//6JEyeuXLlCaOx0OuVy+TvvvBMSEuKLdXBB0d/fb7fbs7OzsYcLhoVqlz/wtB5EgPvW5+oFuL0AGW+ex8hkMpfLRQkkvR8eHmbnzCfk7T969GhcXFxCQsK5c+eEpBEy5M/MzOzfv3/x4sURERFbtmwZHh4WEkKGn8+fk/afc0goUvDNN9+sW7cuMjJyyZIlmzdv/u677/jDXb169f3333/zzTf5h/yCCBRFbdq06fjx46jxvXv3wsLCGA/s3Llz7969aNy1a9eGh4fHxcVt2bKlr69PSBmC8myESjNwpoxQQIGxy63+c2+AnVZseGA9zI6xiIiIrVu3Dg8P7927Ny4ubtGiRT/72c9evnzpaTNGje7ubuQWMbUqOJEmVEGDE0L82ScHsFDACDmNgVOKQijaGfWePHkSERFx9+5diqKGh4djYmL+9re/ETq6FYidaCDA8XiNGRsbM5lMKHkMNun9okWL2DnzCXn7bTab1Wqtr69Hec88zfBfU1NjNpvNZrPdbk9MTOzo6CAIEQKbz5+T9h9bBQBbpECv1+/YsaOnp+fmzZtZWVkymYw/IuFhDLYggl6vN5vNqMG1a9dmZ2ebm5vRodlsRhPR1tZWUlIyMDBgtVo1Gg36UaeQMkLKsxEqzcCZMkIBBcYut/rPvQF2ZrHhgbWLCYObN29aLBaHw7Fq1aqhoaH29vZbt251dXUxISeymRBua1VwIk2oggYnhPiz7zaAsQEj5DQEvxSFUIAx6iUnJ1dVVVVUVFAUVV1drdPpfvSjHxE6uhUIBCVud9NQymTV/wgNDS0sLES57oWS3rP3cAl5+0dGRtgDeZThn6ZptVrd1tbG0VZIpZ6enqSkJKxp2Hz+hO1soSIFIyMjUqmUvbfOH9rpdCoUCsZw9iG2IAJN0w6HQy6XI7FardZoNBYWFiI1lErl1NQUZ7jHjx/Hx8cLKUOosMBAKM3AnjJCAQW2XW71n3sDGgc/PIQ8jEwbHR1F52/evCmRSCYmJtBha2vrihUrPGrGiRzkFjG1KviH/AoanBDigGbfrVhsF6zThEpRCAUYR72pqalVq1aZTCaVSjUwMEDoKFIgEHSIyrssl8stFgtFUWazubKy8uzZs+Hh4WKS3pPz9rO3VjzN8D82NjYyMpKWliZyuMTExNbWVr5p2Hz+bsEWKYiJicnPz8/MzNywYUNiYmJGRsZ7773HGfr69etarZYxnH0oVBAhISEhJSWltbV19erVDoejuro6JSVlZmbGbDZv3LgRbSDcvXt33759HR0dU1NTs7Ozs7OzQsoIKc9GSBPOlBEKKLDtcqv/3BvExcUxQz9//pwSCA8hu5BpTPZrjUajVCrDw8PRYWJi4tDQkEfNhBBTq4IDv4JGU1MTO4Qo3Oy7FYvtgnUagl+KQijAOBH+5ptvnjp1auPGjbW1tYsXLyZ0FCkQCDpErTESiWTJkiUURW3fvh2lcdy9e7eYpPfiE+N7l0Kf804BQUhISMjc8yW75Ysvvrhz547VanU4HEaj8d133/3888/ZQ3v31rJOpzObzZ2dnXq9PioqKj09vaWlhb1NZDAYiouLT58+LZPJent7c3JyhJTxg9EYOHa51X+ODdAXID4L4JUTfgUNfsxgZ58MoQvfaUKlKLABxldvYGBAIpEMDAwwZ4QiU6RAIMhwe6fDucu+fPmyRqNBt7QKhYK/W8Xpgm2DvXMX05LZeaBpWq1WWywWMUJEmsYWLn6vrLGxkb/dRNO0xWLRaDTsM9PT0yqVitmr4R9id3Jomm5tbdVqtbm5uU1NTTRN19XVlZeXx8fHOxwOmqYHBwelUil7XH7RT0YZMcoL7ZVxpgztlXV1daFDZq+MY5db/X3SgA8/PAh7ZUJhQP//ZpeYZuPj4xKJhL0nRu7udlMrNTXVbDZHR0ePj4/zfSs0+wSxhIDhO62rq0sqlXZ0dNA0rdfry8rKaBwowPjqjY6OxsfHX758OTY2FgnBdhQvEAg6PF5jaJpevXr16dOnaZretWtXZmYm+t5RU1Nz6NAhfhdsG+waI6Yl+x/7yJEjWq22vb29t7e3rKyspaWFoBL9/79CwJrGFu50OqVSqd1u5x+ij+n8/Pze3l6r1Zqenm4ymWia7ujoyMnJuXHjxtDQUE9PT3FxsV6vZw/d0tKSmprKDMc5pGm6uLg4Nze3p6fHarWuWbOmtraWuaRWq9VqNZLT29urVCrT09PZV+vq6kZHR+12u8FgiI6OFlJGSHmOf/iaYKcsPz/fYDB0dXVZrda0tDTkPb5dbvX3SQMO2PDAeti3awxN01qttri4eGBgwG63Z2VlebTGcAKPpunq6uq0tDQ0fUK+5cw+Xw7nENsF6zS2ejabTSaTtbe30wLRzlevtLS0oKCApunf/OY32dnZQh3FCwSCDm/WmIsXLyYlJU1NTblcroqKCo1GI5fLdTod83WD3QXbBvuBJaYl+z95enp63759KpVKJpMZDIahoSEhIUIjkj81TCaTXC6vr6/nHKJex44dY7LpoAe/U1NTJpMpJSUlNDRUrVYXFRWhh5zMKHv27KmqqmLkcw5pmnY6nSUlJSqVSqPRmEwm9i9YCwsL8/PzmcOMjAx235aWloyMDJlMFh8fbzQao6Ojycrwled/0nE0wTpwYGBAr9crFIqkpKRjx44h7/Htcqu/TxpwwIYH1sM+X2MeP368YcMGhUKxevXq2tpaj9YYmhd4aCcQHWJ9y599rBz2oVAXvtM46pWXl69fv54WiHaOet9++61CoUA3zS6XKykp6cKFC0KRKUYgEIy4X2MADl7/ZDolJeXWrVtCh68G3yYsYGOz2dRqNT1Pdi1gnE6nTCZDL1YFuG99rl6A2wuIQdQzf8AnPHz4kHAY7DAFFBaYXfMOu4JGgPvW5+oFuL2AGGCNAbzn8OHDiYmJubm5nZ2dVVVV1dXV863RQgNV0Ni2bdt8KwIAXjKnGmXAa04gF1BYGAR4BQ0AcMucai0DAAAAAAFR9WPYOf74hWGCAiY14fzqILIUx6t3Mru+iHclQ8TjnXVkrfzhMd8WDXoF486Lwv6OFo8UmHdlAAxu3wpgv4kULIVh+HDeNJ0v+L/R4TMvTua8byZGT+/w2jrCG3F+8pj/3sHz07jzpbD/osVTBebLAwABz575M4Vh/LTgLXjEVAoJBCd7WtFEPP6wLhA89jrjv2gJFgUAAh488+cUhmHOY6tcEAp1MC2x+1eEgjFCtWGEzvf19X3wwQeRkZErV668dOkSYSBCORCKWHRETAkczohkM/lOFlPKRbwt2MIh2AI5bm3HzpGnIYT1mEdFgNgyf/vb34qfFPIo/JorWFewESq+IjSDWAdyxhVf6IWvMCfwxIQH2Sdbt2795JNPmMO1a9dyokVIWzb8IeYYvbA/FuB4sMZwCsMw57FVLoQKdYhBqMyGUG0YofNlZWVKpbKjo6OpqYm/xlCiy4EQio6ILIEj3ky+k0WWchFpC7ZwCL++CAPBdnIpFCx867Ae88iNbJmbNm0SPynkUfg+cRvSQsVXhGYQ60DOuOILvRAmkRIdHmSfFBQUNDY2or/7+/stFovBYGA3ENKWDXaIuUQvEOi43U3jpIPEbndyqlxMTEx4kXyQOUkJFIwRqg2DPY8yNrILpXDGElkOhFx0REwJHCFPCpnJbiaylItIWziwC4dgZ5lsO1Z5t3BiAOsxoUpCQlvtzCWPJoU8WbSIieC0xxY0IsygkAOFLCUXeiF0FB8eZJ9MTEwolUr0P1VXV5ebmytSWzb8IeYYvWI+oIB5xDe/weRUuRgdHRUq1CEGbJkNodowQucHBwcpimIXSsEO5LYcCLnoiMgSOOLN5CCylItIWygPa42Qbfe0FAofrMc8dSMHkZPi6SgEVyCEiq8QZlCMAz0t9CKEmPBw65Pw8HCdTtfY2Lh79+6GhgZUa8CttmyEhvBH9AIBgm/WGH6VC58jVBvGu8Izr1LDgMKLWiP+A+sx37rxFYeNzyvWeFToZY6I8UlBQcGpU6eKiopu377d0NAgXlvCEFNTUyI1DKjoBUTimzXm7bffVqvVX3311a1bt7788ku5XB4aGvrkyRP09c1ms6FvLrGxsRMTEy9evEDf4Hp7e8UPkZCQIJfLR0ZGfvCDH4g5r1arKYp6+vQpupWx2+3emaZWq7G2iNdwLogfXQzPnz93OBy//OUv0aHbuo2+HZ2PkMd86EZPw0YIt66IioqKjY29d+8e5/W2ufhQaL6ExpojYnyi0+mKi4svXLiwceNGzpN2MdGFHaK7u1uMep5GLxAg+OyLdl5entFozMrKioyMDAkJ2bZtW0VFxdOnTx88eGAymQoLCymKioyMzMjIMBqNz549e/ToUWVlpUdDFBUVlZaWPnjwoL+///jx44cPHyacDwkJycnJMRqNfX19SAfv7BKyxSMNvcaj0d0SFxcXGxv7hz/8YWxs7NGjR2yfqFQql8v16NEj/42OBesx7MnY2FiXy/Xw4UPya2YihyCcZ2D7RIwrKioqSkpK7t+/39fXt3v37q+//lpkR6FxCfOFHQs7iT7xFUNYWFhOTk51dTU/hRpBW4+GEEKMfE6QTE5OihQO+BG3T2xEPlJjV7mghUuhYEtrCA1H//97AUK1YYTO9/b2vv/++wqFIiUl5cSJE/xn/iLLgYgpOkLWxK0nCSU4xZRyEW+LUOEQmlcgR7ztQu9uCD1/5vzYk+8xITdWVlayC6LwZXo0KeTJ4vhEyBVssBVrsB3dOpAZV3yhF77CQj4nhIcYnzQ2NqL3evjCCdHFwB9ijtHL6c4ECTz/DxB8lq/s5cuXKpXK4XDMe8oWIBDo7u5OTU1l3mgHAOD1xGd7ZewqFwBAUZRvH94AABCM+GaNQVUuCgoKfCINWAAoFArm93oAALy2+GavLCwsTK/XX7p0CRIHAQAAAAxQPwYAAADwFwH3I0EAAABgwQBrDAAAAOAvYI0BAAAA/AWsMQAAAIC/gDUGAAAA8BewxgAAAAD+AtYYAAAAwF/AGgMAAAD4C1hjAAAAAH8BawwAAADgL2CNAQAAAPwFrDEAAACAv4A1BgAAAPAXsMYAAAAA/gLWGAAAAMBfwBoDAAAA+AtYYwAAAAB/AWsMAAAA4C9gjQEAAAD8BawxAAAAgL+ANQYAAADwF7DGAAAAAP4C1hgAAADAX8AaAwAAAPiL/wKQe60enMnWXQAAAABJRU5ErkJggg==) --- **Mirror:** [Click here to view the mirror](<http://1178878.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 31 May, 2020 03:40 GMT ---|--- Vulnerability Verified:| 31 May, 2020 03:56 GMT Website Operator Notified:| 31 May, 2020 03:56 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 31 May, 2020 03:56 GMT Vulnerability Fixed:| 22 June, 2020 13:48 GMT ---|---