logo
DATABASE RESOURCES PRICING ABOUT US

entrades.vinseum.cat Cross Site Scripting vulnerability OBB-1272491

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[entrades.vinseum.cat](<http://entrades.vinseum.cat>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **devl00p ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![entrades.vinseum.cat vulnerability](/twimages/screen-1272491.jpg) **Mirror:** [Click here to view the mirror](<http://1272491.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 24 August, 2020 07:32 GMT ---|--- Vulnerability Verified:| 24 August, 2020 07:46 GMT Website Operator Notified:| 24 August, 2020 07:46 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 24 August, 2020 07:46 GMT Vulnerability Fixed:| 9 September, 2020 04:08 GMT ---|---