Lucene search

K
openbugbountyDevl00pOBB:1245531
HistoryAug 01, 2020 - 4:57 a.m.

fuentelosolivos.com.ar Cross Site Scripting vulnerability OBB-1245531

2020-08-0104:57:00
devl00p
www.openbugbounty.org
5

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: fuentelosolivos.com.ar
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: fuentelosolivos.com.ar  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 1 August, 2020 04:57 GMT
Vulnerability Verified: 1 August, 2020 05:05 GMT
Website Operator Notified: 1 August, 2020 05:05 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 1 August, 2020 05:05 GMT
Vulnerability Fixed: 2 September, 2020 08:40 GMT