logo
DATABASE RESOURCES PRICING ABOUT US

adzuna.it Cross Site Scripting vulnerability OBB-1219206

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[adzuna.it](<https://www.adzuna.it>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **squ1rrel96 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://1219206.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 9 July, 2020 04:57 GMT ---|--- Vulnerability Verified:| 9 July, 2020 05:11 GMT Website Operator Notified:| 9 July, 2020 05:11 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 9 July, 2020 05:11 GMT Vulnerability Fixed:| 3 August, 2020 17:43 GMT ---|---