wolfgangpuck.com Cross Site Scripting vulnerability OBB-1193526

2020-06-1208:55:00

raviakp1004

www.openbugbounty.org

JSON

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website:	wolfgangpuck.com
Open Bug Bounty Program:	Create your bounty program now. It’s open and free.
Vulnerable Application:	Custom Code
Vulnerability Type:	XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:	6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard:	Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by:	raviakp1004
Remediation Guide:	OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data:	Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: wolfgangpuck.com vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported:	12 June, 2020 08:55 GMT
Vulnerability Verified:	12 June, 2020 09:02 GMT
Website Operator Notified:	12 June, 2020 09:02 GMT
a. Using the ISO 29147 guidelines
—	—
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]:	12 June, 2020 09:02 GMT

JSON