Lucene search

K
openbugbountyDevl00pOBB:1246293
HistoryAug 01, 2020 - 10:31 a.m.

mehralsmassage.at Cross Site Scripting vulnerability OBB-1246293

2020-08-0110:31:00
devl00p
www.openbugbounty.org
12

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: mehralsmassage.at
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: mehralsmassage.at  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 1 August, 2020 10:31 GMT
Vulnerability Verified: 1 August, 2020 10:41 GMT
Website Operator Notified: 1 August, 2020 10:41 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 1 August, 2020 10:41 GMT
Vulnerability Fixed: 9 September, 2020 09:40 GMT