logo
DATABASE RESOURCES PRICING ABOUT US

ads4click.com Cross Site Scripting vulnerability OBB-1275211

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[ads4click.com](<http://www.ads4click.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **devl00p ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABLCAIAAAAphcDFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAesUlEQVR4nO2dcVBUxx3HX84TzuNAhONAOBGoEmIoQWoopugwxjEGGeY0Ri1SJdYh1lJiHLXkYi0lFqlBxxLDWAdT4jDWOtahDHWovTr0Shl6QXqSCz0pMge5nERPBEQ8z5PXP3bc2bz3du/dhYMT9vPXvX37dn+/3X3vd2/fe999jmVZhkKhUCgUHyCZagMoFAqFMm2hMYZCoVAovoLGGAqFQqH4ChpjKBQKheIraIyhUCgUiq+gMYZCoVAovsIvYkx8fPz169dxm5SphXYHZaqYZmNvmrkjkqmPMZ9//vn4+PhLL70kuEmZWmh3UKaKaTb2ppk74nETY/r6+oKDgwV3DQ8PHzlyBLcpnoaGhtzcXNymn9DX1zdv3jwxOV9//fXf/e535KLQJiW0sNu9k8AkdwfqrxjfvR5134Z79+699dZbERERMTExP//5zx8/fswwTF9f33MICxYseO+99+AuMZ346aefvvDCC3PmzHnhhRc++ugjkOiLAdDX1zdr1qx//vOfnESRI3zSgGMP7WW0QXDpE8X9+/ffeeedhQsXzpkz5/nnn//Nb37z5MkTQv6PPvooPj4+KCjo+9///t///necOzMOlojFYlEoFGJ2EXKSSU9Pv3LlCm7TT7BYLKGhoW6zmc1mlUo1NjZGLorTUA6HQ3zmSWaSu4PjL6FlBPNPDrm5uXl5eVar1Ww2Z2ZmlpSUQEscDofD4RgbGzOZTK+88srBgwfBIW4dOX36tFqtbmxstNvtzc3NixYtKisrY33joMViYRgmISFhdHQUTRQzwicTOPZwowJN90VDbdy4UaPRmM3m27dv63S6rKwsg8GAy1xVVZWQkHD16lW73X7x4kWlUtnS0iLozkxjimOMzWYLDQ11Op2Cm/6DyDNw9+7d8LJCKEp8Q01tjJn87vDU38lvn7GxMbVaDa/OBoNh0aJFgpa0trYmJSWJLFatVqMXoI6ODrlcPjo66qMYI5fL09LSdu3ahSb6VYxBxx6uEXwaY8bGxqRS6dDQkMj80dHRV69ehZunTp3KycmBm357ZZsERD2P+e1vfxsfHx8eHv6jH/1oeHiYYZjh4eG4uLjR0dHnnnvu008/RTePHz8eHBz84YcfRkZGzps3b/v27Q8fPsSV3NDQsGbNmtmzZ3M2169f/+GHH4LE69evBwYGgnoZhnn77bcXL15M2Lt//37y4fv370dt+Oyzz5YvXz5nzpyIiIg333zzq6++AulfffXVa6+9Fhwc/Pzzz587dw7Nv2LFiuDg4JiYmDfeeOO///0vSB8eHj5//nxRURFa+JMnT957773IyMigoKA333zz7t27nBZA7/HJmb/44ovw8HDOFAf5wAcPHrz99tsRERELFiz41a9+9eTJE1DdsWPHwE395s2b7969u3///oiIiPDw8LfeeuvBgweCvYMeOG/evK1bt8ImffTo0Y9//OPg4OCFCxf+8pe/BPMJbrsA14yCLSOYmTMI3RaI62vBA0Ht/GE8Z86cL7/8MigoCBTY09MTHR3Nr4hhmICAAKfTyXHk1q1b69atCw4Ojo+PP3bsGJieGh4etlqtWVlZ8NilS5c2NzcLFiveBUK6RCI5e/ZsbW3t3/72NzFVeDRsBMeDGP7617/C33DscXoZNiYnnVMUzga0CrIN4+PjDMNIpVJOhs2bN//617+Gm8uXLwcXQJvNlpmZCdN37Nhx8uRJvjviWmJa4T7GjI6OGo3G1tZWg8Fgs9lKSkoYhpk7d67ZbAaTA/n5+ejm+vXrR0dHDQZDe3t7e3t7R0fH0aNHcYXjHsbk5OTodDqQ2NjYOD4+3tTUBDZ1Op1GoyHszc7OJh+enZ2N2tDR0VFYWDgwMGAymdRqNQwSRUVFISEhXV1dly9fRmNMTk5OQUFBf39/S0tLZmamTCYD6TU1NTk5OZGRkWjhR48e1el0Op2uu7s7Ojq6q6uL0NSEzMPDwxs2bKioqFixYoX4A4uLi202W0dHR1NTU0NDQ3V1NfO0Q1taWoxGo81mS0pKstvtnZ2dbW1tFotFq9Xiemd0dLSzsxOMhP7+fpizrKxsbGyss7OzqalJr9efOnWKcdeDoI8Em1EQwcycQSimQMG+xh3odhjfuHFj3759lZWV/Iru3bt36NChnTt3ctKLiooCAgJ6enp0Ot3Zs2dhRTKZjHMBevnll2Ek89oFQpu8+OKLpaWlO3bsgLGfXIX4YSM4HiJ4oDV+9tlnr776akFBAUyBY4/TyzADLp1gA8MwBQUFr7766rVr1/gNy7EhKCgoOzt7y5Yt//rXv9AIumnTpvr6evD71q1bRqNRo9Hwe3D27NkLFy7kuzMTId/mgKnbkZERsNna2pqQkAB3Cc6VgUP6+/tB+qVLl5YtWwZ+9/f3x8XFwUNGR0cVCsXg4CB/02azyeVyMPGanp6+d+/evLw8UHhISEh/fz9hr9PpJB9OuGPt6emJiopiWdblcslkMtQLMJMwODgolUoFp9cTEhKMRiNnzkGlUnV0dHCaFDfHSMicnZ29e/dunNn8A4ELCoWit7cXbDY0NGRkZIDegTMALS0tEokEPkBqbW0FMz8sr3c4I6GlpQWOBKVSCeeOjEZjeno6664Hb9++LdiMgrMfhDYXkwcH6GvcgYRhDLBarQkJCefPn0fzK5VKpVIZFhYmkUjWrl3LMRIMKtgjcFCJn5H2yAWCa9CejIyMbdu2sfi5MlCF+GHDYsaDlQfI0N3dvWnTprCwsPLycngUf+wJzokR5soEbQAll5eXh4WFbdq0qbu7m2ADy7IjIyMlJSWJiYlSqXTRokWlpaUul2tsbAxcgliWra6uzs3N5dS+b98+MAzgCcJxZ6bh2fMYdCASYoxMJoPpXV1dKpUK/Ha5XDabDe66dOnSqlWrcJupqalXr14dGBhQq9VDQ0MqlcrlctXU1GzYsMHtXjEZIB0dHatXr46OjgZXB+CgzWbjeAEd37JlS2pq6t69eysrK5ubmznGo000NDQklUpdLhe5ScEmIbNWq5VIJJ988gkrhOCBwIWAgAC42d3dDS4WuA7lbHK6A3fg4OAgvLaCBoTdTe4CwWbEXTUEM4vMgyLY1zhLcMMYkJGRUVVVhVoil8vhBVSv16elpZ04cQI1ktMjcFBZrVa0LhR+jBHvgphG7u7ulsvl9fX1aNfzqxA/bAjjQRCpVKrRaDiPPQhjT8xvtzYMDg5qNBqpVEqwAcXhcLS2tmZkZICnrVu2bAFdv3r16rq6OvabPTg0NGS1Wtva2nCn0kxjUr+PmTVr1vz58+Em+a3l7OxsnU7X2NiYk5Mzd+7c1NRUvV4PZ7rIe8VkgGg0mpUrV+r1eqPRePnyZbde/OEPf6ipqUlJSXE6nXv37v3Zz37GMExVVdWePXtwXottIKHMY2Njly5dOn/+fElJCX9aw7taxCDy7t7hcEgkkvb2dqPRaDQaOzs7jUYj2EXuAsFmxCEms5g8gn3tkSWAW7dudXZ2cnJKJJKYp6xYsaKqqgpMTroFTPiAF50h165dQ6dovHPBrWuLFy8uLy8vLCy02+3kKkSCGw+4ubKysjK9Xr979+6bN2/CQr7lzBJhTDIMc/PmzaKiIr1eX1ZWRrABJTAwcPny5VVVVRcuXGCeTpfdu3fPYDAAO9EenDt3bkxMTEBAgFwunxB3nnnIIci7+xgGmWSor6/nTDIAXC6XUqmE8wacTZZlW1tb09PTc3NzL1++zLJsdXV1cXFxVFQUuBMi7xWTAQAmbeCm0WgEDnLmyurr6wVnEoxGo1qtZlmWYZiwsDA4TwL+QLEsq1KpjEYjuUnRuTJ+ZqlU2tXVxbJsTk5OUVER3wbBA1n8XJmYP6T87iAcqFAo+DN1rOguYJFmFPOmEMwsMg8E19c4SwjD2OVyoY0jaElbWxuYLeHMlVksFpABzpWxLKtWq3U6HTzWZDIJvlfmkQsE1zimZmVlZWRkgKIEqxB/H8NixgNuroxlWbvdvmfPHoVCAd5zI489kXNluDG5a9cuhUKxd+9eu92OpnNsAKDzZizL6vV60KEOhyMsLOzEiRPopEh0dDR6B1lZWQkmS/nuzDS8jzGjo6NSqRTOacJNcHJu3LjRarWaTKbU1NTS0lJYApwd1uv1ycnJMJ2zCVCpVCqVChxitVpDQkJSU1NF7nWbAVqiUqmqq6uHhoa6u7s1Gg10UKPRoF6A9K6urrVr14K34Pv7+3fu3AneUIRnTltbW0hICDyLysvL09PTOzs7rVYr+Pc0MjIilUrNZjOY3UJbmJ8Z3Ws2m2UyWWdnJ8d+wQNB+s6dO3Nzc/v7+00mU1paWlVVlciLBb87CAfu2rUrIyPDZDLZbLajR4+CDzvIXYBrRrRxYI24zCwy6gh50Ibi9zXuQPIwZnmfvKDfxzgcjq6urpUrV4JHaGjTgU8uLBaLyWRKSUmBbYh+H6PX65csWXL48GFOg3jqAsE1Tozp7e1VKBTQGH4VHsUYwnggYLFY8vPzWaGxh15qUEvQdE5D4WzIz8+HMZ5gA/v0W7fTp0/bbLahoSFgVXl5Odibl5cXEhJy4cIFeCz8Pub27dt1dXVhYWGtra2C7sw0vI8xLMuWlpbK5fLa2lp089ixYwqFoqKiQqVShYaGbtu2DT4b5DwZ02q1sCjOJiAvL2/jxo1wc9myZWge8l5yBtQSvV6/bNkymUwWFRW1d+9e6KDVal2zZo1CoUhMTKysrATpTqeztLQ0MTExICBApVLl5+cPDAxwWgxtIpfLdeDAAaVSKZPJNBoN+PdUUlIC2w21hJ+Z0/7FxcUrV67k94tgLSzLjo6OFhYWKpVKtVoNnliKvFjwu4NwoMPh2LNnj1qtlsvl2dnZ6F82XBcQmhE2DqyR3OZg1J05c0YwD8dsfl/jCgcHCg5jfruxT2MSRKVSFRYWglckUBsGBgZycnIUCkVcXFxFRQVaSG1tbVJSkkwmS0xMRJ/0oKPFIxfIrrHf5NSpU9AYfhUexRjCeBCD4KUAXmo4lqCXILShvqUNgMuXL2dlZYWEhMjl8pSUlNOnT8Nd9fX1CoWC87V1VVVVXFxcQEBAWloa/FZG0J0ZhZsY4wXkN2EgiYmJbW1tuE3K1EK7Q+Qw/jaAf8o+reJZZJqNvWnmjhdwvzCaNG7cuEHYpEwttDsmAaPRmJCQMNVW+B3TbOxNM3e8YOp1l/2c69ev/+QnP+EkzhyN7vj4+GvXrv3whz/8+uuvp9qW6cAHH3xw5syZO3fu/Pvf/9Zqtbt27ZpqiygU30JjjBsKCgri4uLQlJmj0Q08/d73vhcQELBv376pNmc6kJWVVV1drVar8/Pzi4uLt2/fPtUWUSg+xrspNovFIpFI4PtLMNHtd8t8wLuSnKIEi/XUQu/m04eGhuDbI3a7XSKRcN4gOnz4MO4dYpTe3t7c3NzQ0FCVSrVz504x4np79uyRyWTog03Ok2SGYeDX414wMjISFRVlNpthyuDgYH5+flhYWHR09IEDBzgKCNDTjo4OIH9Aprm5OTU1VS6XZ2RkwPffYNXFxcWxsbHgmXZFRQX/o1EvIL/rDJ+iJyUlwafovnjQQj4dJh9CR/j0OROhXtZnYwAHwdMJvBKKxK9aZpLxPsYweHlwj8ZxVVVVaGgo+lo6v67JjDFuP9EQqdG9ZMmSAwcODAwM9Pb2ajQaoKRCAMQzo9EIhhcIbJw3Yh0Ox7eRbj18+PC+ffvQFGCY1Wrt6urKyMjgvJ6LE1fHERUVVV9fPzg4WFpayvkoyiOZdPEQOmsmq+UTOsKnMYZQL+uzMYCD4Ck4lcxmc2hoKDyzfGcJ62ctM8l4H2MI8uAejeOMjIy6urqoqCjc1dOvYoxIjW7+h2yCn8W5NXgCrwgjIyPJyclQcIxlWYfDgaqXt7S0LFmyBO4VI67OQalUgq+CGhsbU1JSYLqnMuniIXTWTFbLx3UE6+MYQ6jXd2MAh1tPJ7OD/KplJhn3z2P4+vAgnSwPLqYEhmFu3rxptVq3bt2alpaGqlbgdPUFwYnzowhqfQOd8CNHjkRERMyfP//MmTNkwXBG9OoDR48eTUxM/PjjjxmGefjw4alTp6Dut6C1d+/eFRQwZxhmfHz8nXfeiYyMjIyMfPfdd2Hr4QTYcasqnDx5ct++fehagQ6HY3x8PCAgAGzKZLKxsTG+p5wWIKij7969Ozs7+6c//alWq0V7DSeTznxzyQCyaLyYXob4v1q+R757qpaP6wgOnNUi+LV8/PHHr732Gsz//vvvkx8gEeoljAGCg7hBjp6zDHFRDP66JDj4zr7xxhu4E2oCe8SnLeMPuI8xgvrwAII8uMgS6urq8vLyGIbJz89Hmx6nqy+oeoQT50fBaX2Pjo6azWaTyVRbW5uZmUkWDGdErz6QnZ3d2Nio1WrnzJkTEhLS3NxcU1MD9gpaGx4ejqt3bGxMoVCYTKbW1ladTnfixAlCOTg5+gcPHhw/frysrCwmJub9998HI3Xu3LlpaWlarfbx48f3798Hd/F8TzkQ1NGBdE1tbW1TU9OLL74I03Ey6bALxIjGi+lltEz/V8sX77unavm4jkDhrxbBr0Wj0ej1+vv374MMDQ0NGzZsIFRNqJc8BnCnJ26Qo+csg1/bQnBdEhx8Z19//XXcCYUz2N9axi8g3+YIal6x35Rg4suDc75dFywBkJiYaDKZWJYdGxtTqVRgJgenq88SVY8AUJyfc6csqPUNptE5mtuE6Rfxqw84nc7i4uK0tDSDwXDlyhW1Wl1TU8NvXmgtrl6Hw4F+wFVfXw9VyvnlWPBy9JWVleD7/56enuTkZPgAvKurKzU1Fer3wcklgri6oDo6y7JAe3FgYCArKwu8mNDT0wO/MRSUSYddIFI0nt9uItWrUMhTKJOmlu+R7x6p5ZM7AprKXy1CsJaMjIyLFy/CA6EsEL9qcr0sfgzgqhZsN8FzVnBtCwt+XRKYgdNBHGe7u7txJxTOYH9rGX/ATYwR1Idnv3mi8uXB0b24EliWNRgMaWlpcNe2bduADgRBV18QQbVz1Aac1rfbRyCcDOJXH3A6nXK5HL5Acu7cOTg6Ba0l1wsxm82w9QQF2HFy9ImJifBUaWho4Dx1HBoaOn78OJpIFvZneeroLHKe22w2pVJZXl7e1tbGUZBjeTLp4kVK3PYy+tv/1fLF++6pWj65IyyY1SJwtVRUVBQUFLAse/LkyU2bNnldLwpnDBAcdLvKAItf24LcvIIpHGdxJ9TE9ojvWsZPmIAYw7LsiRMnVCpVe3u7RzGmuLhYJpPBFlQoFKtXr2aJMUbJg2XZ2NjYsrKynp4edNkGjg0SicRiscA/F0D619MYU1BQAFYEAWi1Wq1WW1NTA570rlmz5urVq1u2bKmpqRkYGECvv11dXdBrQWvJ9UJQ9RF+OYRTAjXGbDZHR0ejxTqdztjY2IaGBpynHHt6enry8vLAmk4ghfOOQ2Njo1Qq3bBhA+4lb4PBkJiYyC+ZEGPc9jL6e2hoiGEYzqsZ7e3tgs/8cT3S3t5eW1tbXl6elpaGOsJPJ58OYown+I4bvYLngtuOAK9ZJyUlXbhwQaVSwbsoXC3d3d1gFK1duxYuyMav2tMBwCJjAFe1YLvhYgy/fC9iDMdZ3AlFMNivWsZP+LZzZRBUHlzMXJnL5YqKijIYDLD5+vv7Q0NDbTYbQVeffyuKUzvnWKgQ0vr2KMZ4uvqATCbr6ekBOS9dugS8JmizC9ar0+nQ/zuXLl0CN8s4AXZGSI4eLKcBLa+vr0enK1mWPX36NHpDSRZXF1RHB12GTp0VFhYyDAMmQlm8TLrI66yYXua/V+bPavnifWc9Uct32xEW/GoRgrWwLJucnKzT6UJDQ+G8E79qt/Wy+DGAq1rMKgMAwbUtvIgxHGdxJxTOYD9sGX/A/bvLfH14VuikQuXBOTrbgiU0NTWhb8oCNm7cePz4cRajq49DUJxfjNa3YK+gguH9/f3wj4ynqw8UFRWtWrWqt7e3o6MjMTER6ubilhIQvFwODQ0plcpDhw7Z7faOjg70UYqgADuDkaPXaDRr1661WCydnZ1LlixBJ0lcLldCQgJ6E8P3tKenB9qJU0ffvXv3K6+8YjKZ7HZ7bW2tUqmMiooCt/wEmXTx11m3vczpcT9Xy/fId4/U8gkdwamUs1oErpZDhw6lpKTAtRK8q5cslY+r2u0qAwDBtS28izGos4QTagJ7xKct4w+4jzF8fXgWc3VG5cFRnW3BErZt23bgwAFOCZ988gn4Q20V0tXHgRPnd6v1jesVKBjucDjgfxBPVx9wOBxFRUUqlSo2NraystKttbi/5O3t7ZmZmQqFIiEh4ejRo4RyLHg5ervdDma3YmNjKyoqUBfOnj2L3sQIenrx4kXOS/18HA5HSUlJXFycTCZLS0urq6vr7e2Vy+XghMfJpIu/zorpZY4Mvj+r5Xvku0dK9eSO4FQKV4sg1AIWkYTN5V29LFEqH1e121UGAIJrW3gXY1BnCSfUBPaIT1vGH/CtgsI0oLi4GDz9nkyNbu+Gy0QNMo6nDocjLi5O8L04ykwAvAjuhy8s+QLUWb+9aj9bTJm2/7NCZWUl+GszczS6OZ4GBgbW1dX94Ac/mCp7KFPLlStXMjMz582bN9WGTAYzytnJgeouu2H27Nkvv/zyZNb4+PHj1tZWtVo9mZWSoQFmxjI8PAxe5J1qQyaDGeXspEFjjN9RWFhYVFRUXl4+1YZQKAx8FDHVhkwGM8rZScObGIOqafF3PfeU2bNnf/e73/3jH//otsDh4eEjR454YQngH//4x9KlS4OCgpYvX/755597Xc5EcefOna1bt4aHh8fExLz77ruPHj3y6PDf//73d+/eXb9+vaf1Lly4ECphUCgTwqNHj/70pz8FBgZOtSGTAcdZekJNCBN/H6N4qkVvs9kOHjxYVFT0l7/8hXwIWLLF6xq3bNlSWlpqtVrXrl27Y8cOr8uZKLZt2yaTyUwmk16v7+zsPHjw4FRbRKFQKFODT+bKAgMDAwMDIyIiNm/efPjwYVQE0xe4XK5ly5bNmzdv2bJlTqfTp3W55cGDB83NzVVVVfPnz//Od75TUVFRX18/tSZRKBTKVOE+xuB0s0WKZqenp5tMJvBbUOGcL6c/gbrZBLl7QWNu3bq1bt264ODg+Pj4Y8eOwddLxJsUFBT08OFDqO/rdDqheD6FQqHMNNzHGEHdbPGi2WFhYSMjI+C3oB41X05/YpXMcercgsYUFRUFBAT09PTodLqzZ8/CQjyV8oYcPnyYPkKkUCgzF7df0PB1sy140Wz+V0uCH9OyeFl7dqKVzBmMOjffGKAsBL+kRdcUEDSJYBWgtLR09erV02lpbgqFQvEIN99gDg8PDw4OpqSkcNIVCgV8tSw6OhpoULvlP//5z4EDB7q6upxO5/j4OFgAjsO9e/fsdntcXBzYHB8fByvExcTECJap1WqbmpoiIyPPnTuXkpJy5MiRVatWRUdHwwwymWzBggXgd1JSUn9/P86Y27dvj4+Px8fHw8xkkwhWMQzz5z//+ezZswaDYdasWSLahkKhUKYhor7z/zZXycHBwZCQEPBbo9Hs3Lnz1KlTMpkMvAbGzw9Egtvb2+F1XCKRMAzDn4a6c+fOnTt3BgcHly5dyjDM/Pnza2trNRoNEPhya5gYY8gm4axiGOaLL77YtWtXU1NTeHi4W0soFApluuImxsydOzcsLOz69esvvfSSdxUYDIbk5GSGYe7cuWOz2X7xi1+AdLvdLph//vz5crkcRg4IEHThEBYWJpVK//e//y1evJhhmHXr1u3YseP06dPwLQOGYRwOx5dffgluZbq7u2NjY3HGqFQqiUTS19e3cOFChmHMZjPZJJxV9+7d02g0x48f97rRKBQKZZrgdjaNr5tNEDS1PF2Q1eFw2O328+fPK5XKxsZGsBcna4/K6bMTrWTOYNS5BY3ZuHGjRqOxWCwmkyklJcULcXWXy7V69eri4mIHgttGplAolGmJ+xjD180mxxgYvaRS6ZIlS+DaeSxenp1F5PRZHyiZC6pzCxozMDCQk5OjUCji4uIqKiq8EFdHWwBAXpiAQqFQpjHPsSw7eTdNk05fX19ycrJ3ghA3btxYuXLl119/PeFWUSgUygyBamJiMRqNCQkJU20FhUKhPMPQ9WO+wQcffBAdHZ2bm9vb26vVag8dOjTVFlEoFMozDL2P+QZZWVnV1dVqtTo/P7+4uHj79u1TbRGFQqE8w0zz5zEUCoVCmULofQyFQqFQfAWNMRQKhULxFTTGUCgUCsVX0BhDoVAoFF9BYwyFQqFQfAWNMRQKhULxFTTGUCgUCsVX0BhDoVAoFF9BYwyFQqFQfAWNMRQKhULxFTTGUCgUCsVX0BhDoVAoFF9BYwyFQqFQfAWNMRQKhULxFTTGUCgUCsVX0BhDoVAoFF9BYwyFQqFQfAWNMRQKhULxFTTGUCgUCsVX0BhDoVAoFF/xf3b9rfZa9xXzAAAAAElFTkSuQmCC) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![ads4click.com vulnerability](/twimages/screen-1275211.jpg) **Mirror:** [Click here to view the mirror](<http://1275211.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 25 August, 2020 07:18 GMT ---|--- Vulnerability Verified:| 25 August, 2020 07:27 GMT Website Operator Notified:| 25 August, 2020 07:27 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 25 August, 2020 07:27 GMT Vulnerability Fixed:| 8 September, 2020 13:42 GMT ---|---