Lucene search

K
openbugbountyXav0OBB:1203054
HistoryJun 21, 2020 - 2:44 p.m.

studiotecnicomazzoleni.com Cross Site Scripting vulnerability OBB-1203054

2020-06-2114:44:00
xav0
www.openbugbounty.org
6

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: studiotecnicomazzoleni.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: xav0
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 21 June, 2020 14:44 GMT
Vulnerability Verified: 21 June, 2020 14:53 GMT
Website Operator Notified: 21 June, 2020 14:53 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 21 June, 2020 14:53 GMT
Vulnerability Fixed: 25 July, 2020 15:34 GMT