Lucene search

K
openbugbountyHogarth45OBB:130531
HistoryJan 26, 2016 - 11:14 p.m.

pottervilleumc.org XSS vulnerability

2016-01-2623:14:00
hogarth45
www.openbugbounty.org
14
Open Bug Bounty ID: OBB-130531
Description Value
Affected Website: pottervilleumc.org
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://www.pottervilleumc.org/search.php?pageID=search&search;= ![](x)
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 26 January, 2016 23:14 GMT
Vulnerability Verified: 26 January, 2016 23:17 GMT
Website Operator Notified: 26 January, 2016 23:17 GMT
Vulnerability Published: 26 January, 2016 23:17 GMT[without any technical details]
Vulnerability Fixed: 15 March, 2018 01:51 GMT
Public Disclosure: 15 March, 2018 01:51 GMT