Lucene search

K
openbugbountyXav0OBB:1195951
HistoryJun 13, 2020 - 12:25 p.m.

ville.perros-guirec.com Cross Site Scripting vulnerability OBB-1195951

2020-06-1312:25:00
xav0
www.openbugbounty.org
8

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: ville.perros-guirec.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: xav0
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABzCAIAAADBrEUFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAgAElEQVR4nO2dbVAUV9bHOyOQEQYVmBkQMMImZSjWYlmXsCQhCYtWRIsyE0XDukSJoYyZRUNYkxLMEkIs3EJMNsQYPpAUJlbcD1bWoqgUcdkkO6Eog0gQRyQjEt4z0YEAGc2IQD8f7rNdvd333u556ZkBz+/TTM99Oef07b7Tt7vP/x6WZRkAAAAAUACVrw0AAAAAFiwwxwAAAABKAXMMAAAAoBQwxwAAAABKAXMMAAAAoBQwxwAAAABKAXMM4CJDQ0M6nU6n07355pu+tkURnnrqKZ1OFx8fz8wHZ/nWKkd8fPzFixcV7QJYYAT42gBgvjI3N3fr1i2LxbJkyRJf26IIdXV1fX1969atY+aDs3xrFeLSpUtzc3O/+c1vlOsCWHhIX8dMTk4ePnzYU/0NDAyEhoZ6qjWP46Z5AwMDYWFh7rTjb/ER2CMYDCqVKiYmhm4wv4rS3r388suLFy9+66236L3QzeB2ok6ni4qK4rbLcdZZ3Dy4+NUF1mJxM/4NDQ2bNm1yubpTNkhGhmuH21+AfyI9x0xMTFRWVnqqv5UrV9psNk+15rcsVDddGAyeHT8UxsbGampqzp0799JLL82X4LsZHK/FFuGROUbmoeFl1wDl8MFa2b333uv9Tr3PXeKm/2C324ODg9FKzqJFi3xtjj8SEBCwatUq1+r+8MMPFoslIyPDfTM8cmhwvrjjFOAFJK5jJicn4+Li7Hb7PffcU11dHRIS8u233zIMMzY2FhYW9uWXX1Lqzs7OlpSUREZGhoSEbN26dWxsjPnfK9zQ0NCjR4/Gx8eHhIQ888wzY2Njr7zyik6ni4iIeO65527evInaOX/+/GOPPRYaGhoTE7Nly5YrV66g7bdv337++edDQ0NXrlz5+uuvz87OosIPP/zw4sWLdTrd1q1bR0ZGuL4OHz6s0+mWL1/+wQcfkMxDvPPOO/Hx8REREc8+++zk5CQ9RCMjI+vXrw8NDX3wwQc/+eQTtJG/IIC1HxU4cuRIZGRkWFjYzp07f/nlF3HjWHfee++99evXc2UOHjy4ZcsWsYPY+GDtESxfkBYf+IPhxIkTgl9v3rz5wgsv6HS6FStWvPHGG6g7bBVseLHWYncclrGxMa4jwVoZKQ58sDuRDnb8YIPAH+phYWF/+tOfkNfi4FCCIKe6JDExMRcuXECfP//8c8ny/DINDQ1PPvlkYGAgQz4kxTER70H+YCMdBQLXsKZyvsTExHzzzTcyneIXwHpBOS0AriExxyxdurSnp0ej0Tgcjpdffrm0tLSoqIhhmLKyso0bN/7hD3+g1K2qqmpubm5ubrZYLNHR0d3d3YICdru9s7OzpaWls7NzdHQ0ISHBZrN1dXWdO3euv7+/tLQUFcvOzs7Pzx8cHGxpaUlPT1er1Wh7RUXFrVu3urq6mpqaTCZTbW0twzAdHR27d++2Wq1mszk2NrawsJDrq6enx2w219fXp6enU8xDVrW2tra1tY2Ojh44cIAeosLCwiVLlnR3d3/22WfY0xPJfrvd3tbW1t7e3t7e3tHRUVVVJa6LdcdgMJhMpp9//hmVaWho2LBhg9hBbHwo9kjCHwx5eXmCX/ft2zc6OtrR0dHU1NTQ0HD8+HFsFVJ4SdaK/cISERHBdfT000/zfyK1zEdyJ4rBjh9sEJAXXV1dyOvBwUE0tsXBoQRBTnUBOhH8X/Pz89euXctNOQLOnz+/du3a/Px8bgt/oYw0hLAxoe9B7FEgcI1uqkynxB5hvZA8awFOw0rR39+v0WjQ5+np6YSEhPLycq1Wa7Va6RX1en1HRweptf7+foZhJiYm0PaWlhaVSnXr1i30tbW19YEHHmBZdnx8PCAgwOFwiNvXarV2ux197uzsTE1NFRTo7e2Niori+hofH5djHsMwU1NTnBm/+tWvKD7OzMyo1erBwUH09dNPP122bBnfTZL9qCN+xZSUFPZ/o01yh2XZtLS006dPc+UtFovYQWx8sPYIOu3v70deYH/ivvI/z8zMaDSavr4+9LWhoSEtLQ1bhRRerLXYHUeCP7T4NotbFhQg7URKmyxu/JCCIPC6paWF81rSVKeqC74Oi+Bba7fbKysrw8PDt23bZrFYuO0Wi2Xbtm3h4eGVlZWcMXa7XaPRoB1BOSTFMRHvQfF4EB8FgmIkU8VgS2I9InmBPS0A7uDc/ZjAwMBjx46tW7eupqYmMjKSUnJycnJ8fDwpKYlSRqPRLF26FH2OjY1dsmTJ4sWL0dfo6Gh0YzAsLCwnJyctLS0zMzM6OjolJeWJJ55gGOann36y2WxxcXGo/NzcXEBAAMMw33777auvvtrd3T09PT03Nzc3N8f1xV//oZin0Wi4a/no6Ojx8XGKC9evX2cYZsWKFehrQkKCoADJfoZh1Go1v+Lg4KC4fZI7BoOhsbFxy5YtjY2NGzduDAoKEjhIig/FHne4fv369PQ093JGQkICOn2IwYaXZC0j2nHOQmmZbzxD3YlisOOHEgS+17GxsdhBRQ+CZHUxMTExlF9DQkJKSkr27Nmza9euxMTEO3fuoO2JiYnZ2dl9fX3csckwzNmzZ1NTU9GOIA0h0jFF34NyjgKSqTJLYj3CeiHnrAU4i9P3/K1Wq0qlslqtcgp75NbrqVOnLly4YDabR0dHi4uLH3nkkXfffdfhcKhUqvb2du44VKlUDMMYDIaCgoLa2lq1Wj08PJyVlaW0ea7ZL7MuyZ3NmzejZYfGxkb+5T8HKT5Ye/bv3++mj25CsVaJlqenpz3SuGfHj8eDIFgcYxjmxo0b/K/Xrl0rKyszmUwVFRXcxoqKiurqaqPRWFFRcf/996ONgifKKENaoWMKa6rMkliPsF4cOnRIORfuXiSvdPgXrRMTE1FRUf/4xz/Cw8O7u7vpFfV6fWdnJ6k1yvqM+CtHZ2dnbGws+qzRaARXtdevXw8ICOAXFqxcyTePbgaHYJnlzJkzlB759gtWCc6cOSNeKyO5g1i9enVzc/OyZcumpqaw3YnjQ7JnampKpVLxV2OUWysjhRdrLWXlUAxpaIlbpq+VcTuR0iaLGz+UtTKZS5FygiBzJZOVWivbs2ePRqMpLi622WyCHm02W1FRkUaj2bNnD/JLq9VyfgngH5LimIjjRlkr444CQTGKqQJIJQUeUbzAnhYAd5CeY+x2e0BAAFrcNBqN27ZtY1n20KFDGRkZ9IqVlZWpqaldXV3Dw8OFhYUmk4l1fo7p7u7Oysr64osvbDbb4OBgQUFBdnY2KrNnz560tDT0N6SqqqqiooJlWb1ef/z48YmJCYvFYjAYKGd8unlYq7AYDIacnJzh4WGz2ZycnCzokWQ/Orr4FcvLy1mWnZqaCggI6OnpmZmZIbmDKCsrS0pK4loTO4iND8me1NTUgoICq9VqsVjS09O5jgT28AeDoNOCgoJNmzYNDg6azeY1a9bU1NSg7ZQq/PBirfXIHCNuWeAUaSdS2mQJ4wcbBIrX/ODIDAKlulPhysvL6+/vp8czLy+PZVmTybR69WpuO+WQFMdEzhwjPgoErkmaKtMpziOKF9jdCriD9BzDsmx5eXlwcHB5eblGo0F/OhwOR1xc3EcffUSpNTMz8+qrr2q1WrVabTAY0D8LZ+eY6enp8vLyVatWBQUF6fX6vLw87lkDh8NRVFQUGxsbHBy8ceNG9D/LZDKlpKSo1eqoqKji4mLKHEM3D2sVluHh4SeffFKj0axataq6ulrQI8l+VOBvf/ubXq9ftmzZjh07uOcdDhw4EBwcXF9fT3IH0dnZyTAMKoZ1EBsfkj29vb2ZmZkajSYxMbGmpobfEd8e9r+Dob6+XtCp3W7fvXu3VquNjY0tLy/nTt+UKvzwYq31yByDbVngFHYnUtpkCeMHGwT6oOKCIzMIlOpOhUs++/fvLy0t5b5SDklxTCTnGNJRIHDN45C8wO5WwB1kzTGAx3H/dGC329VqtcxnrpQA/QnVarXo7/bCY9OmTeHh4fzHIP3ZWb61nmXVqlXnzp3zeLOsYpMi4FdATsz5ytmzZ9PT032YqSk2NnZ4eJhhGL9NE+kmdXV109PT6Ma7/zvLt9azfPfddx5vE7h7cHeOET+7gujr6/Or3I6SXLx4sba29v3338f+qtPpWJb9+eefNRoN/zCmuBkfH3/mzBmFktROTk4eO3YsNzdXicZlsmjRIvrTsUrgzfHG78snzjoFKTLuMDQ0tGbNGoZh9u3b99e//tXj7fucp556qrW1VaPRfP/998xd4K9PcHeOQXcFxMyvCYZhmPz8fMopG7lZVFQ0NzdXU1PDbSe5qXQWdL1en52dvWPHDoXa91sWzHibF/i/ooGbCAQRFry/vsHZxTU5S6goZ6qLq3fegm+kzWZTqVT8l34dDkdubq7A046ODu5NezqHDh0qLCx000IPhvqrr75KTk4ODg5OS0vr6upyrRGZ+Pkiu5vmcbfcXW7H3+IjsIc/GGSa6kIVlykqKlKr1eLnR8RQCpCe/5ZZBXAKV+75Y9NI8PG3owgLZWw5HI6MjIycnBzKIzF0UlNTz549676Rngp1VFTUmTNnxsfHy8vLuVcQnG1EPpJm+xBPzTGsq27629Eh8xUomS0o6h36L9jZ2Yke2KPHH+YYP8GVO4QLPmu91Wpdt25ddXW1a9X9LQs6wzAzMzMpKSlhYWEpKSmeesudwoIfIYi7xE3/gZNvQK/iQ/znBRJzDCU1t8y83Awu4TapLjaXu2S+dIo0gHwj+axcufLgwYPygyhwUDILupwU6IxIB8G1UCOMRuPGjRv//Oc/l5aWCvIKCxr5/vvv3VRwECdvd1nBgSJP4KaCg2flG7D2e1a+YefOnVgHPavgIKkXID4Y5cs3YK11Tb7hxIkTfHcUkm9woQogRvo6hpKaW05eboaQcJuU2V7cHSVfuhxpAJlGuoY4YTgjIwu6QinQSaFmGAblOKmvr29qavr1r3/N/0nQSHx8vP8oOJBy3bup4OBx+QaS/R6Ub9i8eTPWQc8qOEgeF+KDUb58A8laF+QbBLYpJN/gQhUAA30prZ+cmrtfXl5uFpdwm1RX3B09X7qkNIBMI7HrsPRXlLEJw1l5WdDlpED3VKhZlq2rq0tKSrJarRkZGVlZWSzL9vb26vV6kqduKjiIk4W4rOAgKd/AOq/g0O9p+QaS/ZRBTlr0p8g3OBwOrIPuKzjIvx8jJyEbPbxYnQWxUyRItpE0EbgCcuQb5FcBnEL62WUNOTW3nLzcDCHhNqmuoDt6vnRJaQD5RjoLNmE4IyMLunIp0BlCqEtLS5uamiIjIz/55JOkpKTDhw8je0h9+YmCAyXXvZsKDhqPyjeQ7Gc8Kt+A7j1o5oOCAym8JGvpI18SheQbXKgCYPHSe/7yU3PPF0gJwyWzoCudP1wQ6hs3boyPj//2t79lGGb58uX19fUGg6G9vZ2yKMH4h4JDaWkpKdf9vFBwkKmY4LJ8A7MgFBzcfwJFOWEIwDPQL3Mo60X98vJys7iE26S62MyDkpfnLDmlpkwjXVgrY3EJw2VmQZeTAp31UKjRJT9fPXD37t0Mw5jNZlLvbio4UAJL2k0CuEBpcLnu3VRwoJskxln5Bs5+OYNcvnwDqUdsiLD2kBQcPL5WRgmv2FqnnnUmdYQNAmXhCyvfIL8K4BTuTvjFxcUjIyOXL18uLy/Pzs5GG7VarcPhuHr1Kvpqt9vNZvPRo0cjIiIk6wpYtGhRbm5uUVHR0NAQKrl9+3aPG6lSqWZmZiTbmZmZ4V+GR0REvP3222az2W63oy2tra1RUVHcYsKVK1c2bNjw5Zdfjo2NDQ0NHTt2LDk5mWGYoqKi3bt3X7p0aWRkZO/evV9//bVHvGBwoV60aNGuXbvy8/MvX748NjZ24sSJTz/9FE0hXMuCRkpLSx9//PFnnnmmuLjYaDTSrXLNFwGkQOXl5RmNxsuXL//www9Hjhx58803GYbR6XTh4eHvv//+5OTk1atXy8vLFTVv0aJFWVlZ/ODLt5/B7bXw8HCHw/Hdd9/Nzs7Sfdm8eXNxcXF6ejoliwE2RFh7QkNDU1JSiouLf/zxx6tXr3K34vn2MKLBIAgF9mCkVJFjrftgm+X7JWcnCnChCoCHPgXRr2M0rublJtXF/qlxIV+64H6mpJEOh0PwZx9rzOnTp5OSkijhkpkFXU4KdNZDoWZZ1uFwHDhwIC4uTq1Wr1mz5uTJk319fcHBwXxtDK6R9vZ2jXsKDi5cx5AChc11z7qn4ODsdQwrJd9Asp+y11yQbyA56BEFB5nyDSxZwUGOfAPWWo9cx5DGCd8vSfkGcYRJVQCncD23v1ODw4N1Fepo3759mZmZlALohFtXV0cpo1AWdK+FC/Ag7u81kG9QGoEgwoL31ydAbv//p7q6mpRvEXHvvfeePHny0UcfpZSBLOiABwH5BqURCCIseH99grcfwHjqqad0Oh33UNPQ0JBOp9PpdJ5amXWZwMDAhx56iPQrMpt780tgNvqVuw2jEPHx8RcvXlS0CxI6AtxLggsAn/t48eLFF198kfuK5Bu2bdvGbblz584f//jHH3/8UU5rHhktSNEgJibGm2mtvbkjdDpdTEzM8uXL0Vef+Lvg8fZ1DEqmnZmZif47zJdk2vQc4IJflWB2dlZRsQA6d0NGfZ/7KFCXEMs3BAYGBgUF7d+//+OPP6Y3pbS0hKL4fEcAHsa1JTZ3ssFLPjTscrPYm3JyburKcYdutqQjbnrqNbEAVkY0+A8jePlGqKdc8AeUU5fwq9GCAHWJuxYX18rQmPDsbOdD/N8dwaudrrFy5Uou/QEFf47GAnCBg28kyijMJRK+fft2VlaW+Hn68PBw7kF5Cn44WnJzc8vLy9FLprt27XKtEZnItBzwDvBCrJcICAhYtWqVa3X9TSyA88Udp1zmbsjo7o66hL+NFgSoS9y9SF7ptLW1paWlqdVqrVabk5MzPDw8MTHBVUfPnjscjl27dmk0mvvuu6+srIx7ar6trS09PV2j0URHR2/evBm9NE5ZdMK2g8pUV1fHxcUtW7Zs+/btXI5F/gPslZWV3LoNabvYF5ZlZbrj5loZn6amJqfK1NbWbtu2jRJSlmVnZmYOHDig1+uDg4NzcnK4F0EqKyu1Wm1UVFRdXZ3YhaqqKsHbG4JoyDFVplP8AlgvFHIBaxuprrhHlvqGFhqWwcHB27Zts9ls+/fv12q14eHh+fn5KEujTCNdyzSBjS1/tPhDqBFlZWVJSUlGozEpKYmfY0LcCHp5C723b7PZli1b9sUXX2DbRJB84VsuuZtIgSKd2QD5SM8xtbW1H3744cTEhNVqLSoqMhgMLMtySbZR0EtLS3Nzc/v6+rq7uzMyMo4dO4bq6vX6urq68fHxvr6+t956C70bRTlZY9tBD63v2LFjdHTUYrGkp6cbjUZU3mAw5OTkDA4O9vb2rl69mptLSNuxvsh0x6k5RiuCXzgqKiozM7O9vR0b8La2tszMTP6y+8aNG0+ePEkJKcuylZWVKSkpXV1dw8PD+/btM5lMXNysVmtTU1NPT4/ABYZh+FEqLy8XR4NuqkynxB5hvVDIBaxtpLriHlmW3bVrV3Z29uDgoNlsXrNmTU1NDVcyLy9veHgYDUutVpufn49GaUZGxr59++Qb6fIcQx8t/hBqRFVVlUajCQ4OHh0dFY8QQSOHDh16/PHHWZY1Go3bt28Xl+eD9UVgueRuIgWKdGYD5OPcPX9+HnXBKVVmgnGWerIm5ehmeNnCW1paULZwUvJtmUm5+XnUZZohf44ZFsEvjM3AzxL0AuSIBbDy9ALEx56kXgDJVDHYkliP3JE8cMEFrG2kuuIe55e6BH+0+Emo2YWuLgHQkZ5jOjo61q1bFx0dja4useIZDMNwf9jDw8O50ZObm5ucnFxcXFxdXf3VV1+hjaRDi9QOKTvF6OioWq3mtnd3d9O3k3xxwQw318q4jgwGAz8lYkBAgMFg4I4HxKeffspPQIAN6cTEREBAgOBCnm5kf3+/IErcXhNXFJsq0ymsR1gvlHZBYBuprrji6OhoUFAQ99VisWD/ZvWTsxnJMdKFOUbOaGH9INQsbxoYHR3VarWVlZXnzp1LTk6m9N7c3MwwDLpkpCDpi8zdxOICRTmzAfKRvudvMBgef/xxk8nU2dn52WefiQtwubU7Ozs7Ozu7urq4J9xPnTqF/sJMT08XFxfv3buX0hGlHU8h6YunzBC/QSYocO3atcLCQoHYQUVFhclkMhqN165d4zaKxQJIIVUoiT3WVJklsR4xZC8UlTyQ6cV8Qc5oYfwg1GJ1ibKysqqqKj9UlxAEygtnpLsC+hQkM4+6RnaCcZb6LwPbDumfCCn5Nmk7JY+6s2a4uVYmzsDPIdALkCkWwMrTC6CsfpD0AiimCiCVFCsgkLxQyAWsbaS64h7nkboEfbSwPgr1wlOXAJxCeq1Mr9cfP358YmLCYrEYDAa0S+x2e0BAADdu9uzZk5aWhgSRqqqqUEa57u7urKysL774wmazDQ4OFhQUZGdns9QRgG2HMkrQvf3h4WGz2ZycnCy5HeuLTHc8uFaWl5fX399PKdDf35+Xl8eyrMlkWr16NbedFFKWZSsrK1NTU9GdT/QvUs5Zgx8l7i4uPxqSpsp0ivOI4oVCLmBtI9XF7seCgoJNmzaJ7/nLn2MkjRwcHOQvRomdRfT29orPiaTR4iehZlnWaDQ+8sgjZrPZZrPV19ejR9dee+01roCgEaPRiB6NO3ToUEZGBkuF7ovM3UQKFPZUADiF9BxDyj3OTynvVIJxygjAtkMZJaTk26TtlDzqku54/H6MHGSKBbDy9ALELrisF+AO7kgeeMoFUl3sfpwv6hKC0cL6R6jZhaguAcjH9dz+rjFPk2nTzRb86kEUEgtgFZsUvYk7LnjNffkdua8uAaMF8EN8kBNzPibTppst+NWDgFjA3YP76hIwWgA/xNtzjOAJK5RM28s2uADdbPFjYwDgLHR1CQRdvmgBQzrE+vr6IB+znwP5yvwF/5HSUQi+yo6vnBUo/cz3mFNCusA0jToJwATj/9zDsqyvbQAYhmEGBgYSExORJs2CPHJu3LiBVHZ+/vlnXznLt4GZ/zGnhFTgqRJcunQpOzt7YGBAofaBhYGy1zEDAwPuHLoDAwNIaNbldtw0wOMI7JmcnDx8+DD3VaVSSWrw8aso7d3LL7+8ePHit956S7IXiiXcTtTpdFFRUdx2irNcFQqC0MlEYAPdDDf7olT0lIOUkIo9xZrhzvjxiIKATBsko8G1Iye2gDeZH2tlC1UQwgXZDK8po4yNjdXU1Jw7d+6ll17yw+B7UyHG5b7cMdL/JXD8UKUG8EO8fc/fZUAQwssg1Syk16tc3hHAh4CmEeAFpK9jzp8///DDDy9evFin023dunVkZARdlh4+fFin0y1fvvyDDz5gGGZ2drakpCQyMjIkJGTr1q1jY2NcC++88058fHxERMSzzz47OTlJ725kZGT9+vWhoaEPPvjgJ598gjbyL6jPnz//2GOPhYaGxsTEbNmy5cqVK1yBI0eOREZGhoWF7dy585dffpHjC8Mw77333vr167kyBw8e3LJli9jB27dvP//886GhoStXrnz99ddnZ2cl7eHaxF6/T05OxsXF2e32e+6558SJE4Jfb968+cILL+h0uhUrVrzxxhuoO2wVbHix1mJ3HJaxsTGuI8FaGSkOkjuRDqkKdpcJ4uDUrqEjriKOOdYkcWwFFd1xUGbYnSUmJubChQvc188//5xenl+goaHhySefDAwMxAYNlRGfE8RR4h8ppKNYHA2xqZwvMTEx33zzjUyPAC8gPcd0dHTs3r3barWazebY2NjCwkKGYex2e09Pj9lsrq+vR7ntqqqqmpubm5ubLRZLdHR0d3c3qm632zs7O1tbW9va2kZHRw8cOEDvrrCwcMmSJd3d3Z999hn29JSdnZ2fnz84ONjS0pKenq5Wq7mO2tra2tvb29vbOzo6qqqqZPpiMBhMJhN3a7ShoWHDhg1iBysqKm7dutXV1dXU1GQymWpra+n2SLJ06VJONiMvL0/w6759+0ZHRzs6OpqamhoaGo4fP46tQgovyVqxX1giIiK4jp5++mn+T6SW+UjuRPlVsLtMEAcP7hpxFXHMsSYxotgKKrrjoMyw05HM05qfn7927Vr+rMNx/vz5tWvX5ufnc1v4C2WkOGPPCfQRiD2KxdGgmCrTI8B7OPXGJtJc6RdJTbA4FQf2v+/Dc9Ivra2tSPqFBEn6hXvNmKJJwxDkQEjvJ/P1Y9LS0k6fPs2Vt1gsYgdd1shhRZlFsMX4n0l5GMVVSOGlKPEI/CLBdSSwWVJch6LfQ2rTTckfT8kXydybWJOwseUqKqRpxJJDKt5Cz9PKOqMA5FtNI5KpYuSrHwHKIX0/5ttvv3311Ve7u7unp6fn5ubm5uYYhtFoNPzFn8nJyfHx8aSkJHF1jUbDXQtHR0cjSQYS169fZxhmxYoV6GtCQoKgQFhYWE5OTlpaWmZmZnR0dEpKyhNPPIF+UqvV/IqDg4MyfWEYxmAwNDY2btmypbGxcePGjUFBQQIHf/rpJ5vNFhcXh77Ozc0FBATQ7XGH69evT09Pcy83JCQkoMNPDDa8JGsZ0Y5zFkrLfOMZ6k4UQ6lC2mWSJrmwa2RWIZlEia07DlJ8dArJl51DQkJKSkr27Nmza9euxMTEO3fuMAyTmJiYnZ3d19e3dOlSruTZs2dTU1ORs6Sgkc4J9BEo5ygmmepyMUBRpEeqwWAoKCiora1Vq9XDw8NZWVmkkt65M3zq1KkLFy6gTKjFxcWPPPLIu+++K7MuyZfNmzejy/bGxkb+ggAHpyTBHdtc5hh37FEIirV+2zIJyeHn2V0jp4r8I8IjDtJ9lI94cezGjRuCLdeuXSsrKxMoAFVXVxuNxoqKivvvvx9tFGsakXzWzxwAAAdaSURBVIKmqEqNwFR3igEKQr/MwWquYJcOxCoOrFTSUzEk6RfSYgVfk4aRkgOh6MewLLt69erm5uZly5ZNTU1hu5OjJMHZMzU1pVKp+PrQCq2VkcKLtdapzIakRRjJlkk7kdKmm5I/Tu0aev5sySoyFZUE7SukacR6dK1MpgKQzzWNKKbK9AjwJq7ox2APJ7GKA+v8HMMSpF+4diiaNAxO32JqaiogIKCnpwflYyfpx7AsW1ZWlpSUJFa44XBKI4dl2dTU1IKCAqvVarFY0tPTUV8Ce/iyGYJOsZol9Cr88MpR4qFDOnlhWxb4RdLvoZwQ3ZH88ZR8EamKQN0EaxJJFICrqISmET2kziZLlqkA5HNNI0lTZXoEeAdX9GOwY1es4sC6NMdgpV+4duiaNFh9iwMHDnDiFhT9GJTyFhXDOuiURg7Lsr29vZmZmRqNJjExsaamhuuLbw/Lk80Q39UUa5bQq/DDK0eJhw7p5EVS1OD7RdLvoZwQ3ZH88ZR8EWVv8iVSsCaRYstVVELTiB5ShRLyL0hNI0A5vK0foxDuH052u12tVst85koJ+ueJlI7L8FV2fOXsPJUvIkEJKWgaAX7CAsmJOTAwsHr1anfS//3zn/88fvz4v/71Lw9a5RSzs7NWq5VhmHman1GSGzduIJWd5cuX+8pZvg3M/I85JaQCT+cF7h/FgB/im1wy/qYGMTk5eezYsdzcXHcauXjxYm1t7fvvv08qcOfOnR07dvz973+PjIwU/yqW0omPjz9z5gzK5qIQ3twR/L58pRs0T+WLSFBCCppGgJ/gmzmGpPfnq/+Ser0+Ozt7x44d7jSSn59Pn6UCAwODgoL279//8ccfS7Z26dKlubk5RScYxv92BAAACw3vL8/JWXVFaVa9Y4/L8I202WwqlYr/trPD4cjNzRV42tHRwb3ITefQoUOFhYVuWrhgQg0AwDzFB7n95WTznhepvPlGoizFXAbZ27dvZ2VlzczMCKqEh4fb7XY5jXstcfq8CDUAAPMU3+jHLPhE/Vardd26ddXV1a5V97fE6QAAAK7h3BzD5crGZvPGpvenZPN2J5U3qS42fT02Tz4qefTo0fj4+JCQkGeeeWZsbOyVV17R6XQRERHPPffczZs3nTKSz8qVKw8ePOhCYBGSidO9GWoAAACXkTvHCJJ7Y7N5U9L7k7J5u5PKm5TMX9wdNk8+89/E+C0tLZ2dnaOjowkJCTabraur69y5c/39/aWlpU4Z6RrirOmMjMTpXg41AACAi0jesREn9yZl86ak98dm83YnlTeprrg7Uu4vVHJiYgJtb2lpUalU3HvFra2tDzzwgHwj6emqsFuwWdNZeYnTvRlqAAAAl5G+jklMTJyenu7r6yspKQkJCWF42bz/8pe/HD169D//+Q8jld6flM3bqVTevb2909PTiYmJ9LqC7ih58jUaDZexPDY2dsmSJYsXL0Zfo6OjubvlMo10FnFgEdjE6b4NNQAAgGtIzzEVFRUmk8loNF67do3beOrUqbq6uqSkpOnp6eLi4r1796LtiqbyRmn1FkyObmxgGVzidAg1AADzFOk5pqSkxGKx6PX65OTkF198kdv+u9/9bufOnSUlJR9++OGZM2eWLl0aHh5+8eJFp7p3OBxDQ0Pos8Viue+++7DFXnzxxeTk5KioKIvFUlJS4lRdvV4fFBT0/fffo689PT2c1pNnjXQWbGBnZ2cbGxsFTy37PNQAAACuIeuef0RExNtvv202m9G7HVeuXNmwYcOXX345NjY2NDR07Nix5ORkhmGKiop279596dKlkZGRvXv3fv3113IaLy4uHhkZuXz5cnl5eXZ2Ntqo1WodDsfVq1fRV7vdbjabjx49GhERIVlXwKJFi3Jzc4uKioaGhlDJ7du3yzHMKSNVKpX4bRgxMzMzfAVDQWAZhmltbY2KiuJW9vwn1AAAAK7gwj0cUjZvOen9WVE2ctdSeZPqkmQ8xHny6boD3FeZRjocDrVaLbhJLjbm9OnTSUlJlNjKTJzuzVADAAC4jC/zLruTZtVrKVrld/TSSy+ZzeZ///vfpAK3b99OSEh47bXXnn/+eVKZBx988KOPPvr973/vorkEIKMtAAA+wTc5MRck1dXVpBSTiHvvvffkyZOPPvoopcx3333nabsAAAB8hm9yySxIAgMDH3roIXoZ+gQDAACwwIA5BgAAAFCKBaKDCQAAAPghcB0DAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKAXMMQAAAIBSwBwDAAAAKMX/AQyFMOiu7P7YAAAAAElFTkSuQmCC)

Screenshot: ville.perros-guirec.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 13 June, 2020 12:25 GMT
Vulnerability Verified: 13 June, 2020 12:41 GMT
Website Operator Notified: 13 June, 2020 12:41 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 13 June, 2020 12:41 GMT