logo
DATABASE RESOURCES PRICING ABOUT US

caprishop.com Cross Site Scripting vulnerability OBB-1319862

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[caprishop.com](<https://www.caprishop.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![caprishop.com vulnerability](/twimages/screen-1319862.jpg) **Mirror:** [Click here to view the mirror](<http://1319862.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 10 September, 2020 07:23 GMT ---|--- Vulnerability Verified:| 10 September, 2020 07:36 GMT Website Operator Notified:| 10 September, 2020 07:36 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 10 September, 2020 07:36 GMT Vulnerability Fixed:| 10 September, 2020 22:22 GMT ---|---