logo
DATABASE RESOURCES PRICING ABOUT US

fachportal-paedagogik.de Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1179251 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[fachportal-paedagogik.de](<https://www.fachportal-paedagogik.de>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **CityBoy ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![fachportal-paedagogik.de vulnerability](/twimages/screen-1179251.jpg) **Mirror:** [Click here to view the mirror](<http://1179251.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 31 May, 2020 15:34 GMT ---|--- Vulnerability Verified:| 31 May, 2020 15:42 GMT Website Operator Notified:| 31 May, 2020 15:42 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 31 May, 2020 15:42 GMT