Lucene search

K
openbugbountyDevl00pOBB:1321451
HistorySep 10, 2020 - 1:02 p.m.

winplc7.com Cross Site Scripting vulnerability OBB-1321451

2020-09-1013:02:00
devl00p
www.openbugbounty.org
7

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: winplc7.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABLCAIAAAAphcDFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAdMklEQVR4nO2df0yU5x3A356I53kC4nEioJ7MInGUMksZc9RRYiwhxFyv6ByjSg1BQxjpDHXInGGGWELVWMcY6Yg5m84aYwkjzBFDDWHuZhhjV3qjeCEMrufJ8ESwp70i8u6PJ33y9H2f57kXuFfP9vv5657nnvf7fH88d8/d8z7v93lGFEUBAAAAAFRA86QVAAAAAL61wBwDAAAAqAXMMQAAAIBawBwDAAAAqAXMMQAAAIBawBwDAAAAqEXozjHr16//5JNPWEVAVcDbAAAEhRCdYz799NPZ2dnnn3+eWgRUBbwNAECwCDDHjI6OLl++nPrW1NTU22+/zSoukLa2th07drCKTxyOW4Jy7ejo6DPfZP369fPrbh5QvT06OrpixQo1uluIMyVylGs4j07v3r37xhtvxMTExMfH/+pXv3r48CFHjsIoB8VwAAhl5v8/ZnJy8vjx46ziAgnxOWbdunVer1fVLvR6vf9ramtrU1NTVe2OJNS8HSIUFxdPT0/b7farV6/abLajR49yGj+GEQIATwWhuFZ269Ytp9OZnZ1NLYYIS5YsUU+4VqvNyspa8jXnz58vLi5WrzuS0PT2E+fLL7/s6+t777334uPjN27ceOrUqUuXLvEvUXWEAMDTgqI55t13312/fv3KlStff/31qakpQRCmpqZMJpPP53vmmWfOnTtHFk+dOrV8+fJ33nln1apVK1as2Lt375dffonk/POf/3zppZeWL18eHx//2muvffbZZ9Tu2tratm/fvnjxYknx1Vdffeedd1DlJ598smTJEqSMIAj79+9/6623+A2effZZ/uWkDnxR+/fvx6scaMXj5MmT69evX7Fixc9//nPUEtVT/UDy6NGjw4cPr1q1atmyZTt37rxz544gCKtWrfrrX/+KnTY+Pp6fn6/kwvv37+/fvz8mJmbNmjW//e1vHz16JNFw2bJlP/3pT+/cufPWW2/FxMSsXLnyjTfeuH//PtX5N2/efOWVV5YvX75x48bz58/jNtRelHhM7iU5VOHIDz/60Y+WLl0aExOzc+fOmzdvcjTE8KMgH9is9kuXLv3888+XLVuGLhwaGoqLi6PqT/ZLvubb/p///GflypV/+9vfWAJ///vfv/LKK7j461//eu/evRwFACBECDzH+Hw+u91us9l6eno8Hk9VVZUgCJGRkYODg2g9p6ioiCy++uqrPp+vp6ent7e3t7e3r6+vvr4eicrPzy8uLna5XNeuXcvKytJqtdQeWQtl+fn5nZ2dqLK9vX12drajowMVOzs78/Ly+A3MZjP/clIHvqiXX35Z4qL+/n7kIpfLVV1djeupfiCpr6/v7Ozs7Ox0Op1xcXEDAwOSBlartbCwEM+4/AsrKio8Hk9fX19HR0dbW1tjYyPWxG63X7t2zW63ezye5ORkr9fb399//fr1kZERrLDE+eXl5REREQMDA5cvXya/wam9BPQYy0sSWCb09fWVlpaOjY05HI6EhITy8nKOhpLoUKNAHdhKonbjxo3KysoTJ05Qu2PpwLF9amrKYrHU1dW99NJLqCZGhtls7u7u/uKLL1CDtrY2i8WiXAEAeGKIXEZGRgRBuHfvHirabLbExET8ll6vJ1uiIrrE5XKh+paWlvT0dFEUJyYmwsLC/H6/vBeXy2UymdBrn8+n1+snJibkRY/Ho9PpkISMjIyDBw8WFhaiHiMiIqanp/kNXC4X/3JSJb6ooaEhbLvERdeuXUMuYvlB4jej0djX18fyv9/vj4qKojaQXzgzM6PX64eHh1Gxra0tMzMTazI5OYk11Gg0Dx48QEWbzbZhwwa5t2dmZrRaLal/VFQUp5eAHqN6SeIQlnAJQ0NDsbGxLA1JOFGgDmxWe4zb7U5MTLxw4YJceUm/SkYIapOXl1dWVibpRYIoipmZmZcuXcIXUj9KABBqBJ5jJBMJ/hhz5hitVovrBwYGjEYjer179+60tLSDBw+eOHGiq6sLt5mZmfF4POh1S0tLTk4OfktSTEtLu3r16tjYWEJCwuTkpNFonJmZaW5utlgsShoEvJyE01jyDUJ1EcsPZPvJycmwsLCZmRmW/y9cuJCamiqvp17o8XjCw8Nx0el0xsbGcjSUF0lvezweif6oGasX5R4T2QOJI7yvr2/btm1xcXEGgyE6OjoqKoqlIYmSKIgKoobJzMw8c+YMeaGSOYbVl16vr66u1mg0Z8+elQuRUFdXV1xcLIpiQ0PDrl27ArYHgFAg7HH+Z/rwww//9a9/ORwOj8dz8ODBLVu2/O53vxMEYdGiRatXr0Zt+DvK8vLyOjs7h4eH8/PzIyMj09LSuru7yZUufoOAl5PMqfFCWLRoEestq9W6b9++eVw4Pxa4o0xVj5nN5pKSkqamJq1W63a7c3NzFy5zrty6dau/v/8f//hHsAQ+ePCgpaXlwoUL5eXlFoslMjIS1cfExEha3r5922KxZGVlCYLQ3t7+2PaAAMACUWVfmd/v//zzz9Frp9O5du1a/NYLL7ywd+/ew4cPnz17trW1VXLho0eP2tvb8decpCh8veiPvwrNZnNra2tXVxf+FuM3CHg5yZwaz9UPiMjIyOjoaNYT9Tdv3uzq6iosLJS/Rb3QaDSGh4f/97//RcXBwUGTyaRQVUHmbaPRKAgCqX/AXhbuMZbw27dvezye3/zmN9/73vfi4+PRnTyWhhICRkF5e6PR6HA4FNqiBI1G09LSsnPnzoyMjCNHjuB6uwxBEJ599lmj0fjxxx9fv3496D90AEAt+H9zOEscPp8vLCzM6XRKimj1uaCgwO12OxyOtLS0mpoaURQHBgZyc3OvXr3q9XpdLldJSUl+fj6WjBaXu7u7U1JScKWkiDAajUajEbV3u90RERFpaWnKG/DflaxxsxorXAmh+uHevXthYWGDg4Nopev48eMZGRn9/f1ut7u8vLy7uxuLqqurM5vNpD6ketQLS0pKduzY4XK5HA7H5s2b0aqOwrUyubfNZjOpP76K2otyj0l0kDiEJdxoNDY2Nk5OTjqdTrPZjC5naYgdxYrCXKNGDQGW4/8mMzMzytfKUOXg4KBWq+3v7xe5HD16NDU1lfzgAECIM///McuWLTty5EhaWtq5c+fI4kcffaTX69PT0zdv3pyVlZWamnro0CFBEDZs2JCZmXngwIG4uLj09HS/39/c3IxEjY6OGgwGQdmjl9u2bdu6dSt6+CA+Pj4pKUnym47fgPMuVkN5X3yofli+fHllZeXmzZs/+OADQRAOHTqUnZ2dk5OzYcMGt9u9adMmfLnVaiWXRCTqUS88ffp0bGzs5s2bc3Nzd+zYUVZWplxbubcbGhru3buXnJxssViKiopwPaeXeXhM4hCW8EuXLp09ezY2Nnbr1q2JiYkcDSWOokaBA6f96OhobGyspL3P59N+EzywlbNx48bS0lK0WY6DxWLp7+8vKCiYq3wAeFI8I4picCWOjo6mpKTgTZZzYuPGje+///4Pf/hDavHpYiF+eCI81d5mMdcohHjU7t+/bzAYPB6PSnl9ACDoPNZ7/gG5ceMGpwioCng79Lly5UpWVhZMMMBTRCjmkgEAQM7U1BTatfykFQGAOQBzDAA8HRiNxqioqD179jxpRQBgDsxzjuFk8l+3bp3D4VApaTknHTqZ2h2rN6f06V999dXPfvYzSfs7d+68/vrrKKP74cOHUUZ3aqUgCCdPnly5cuWaNWv+8pe/rFu37osvvvjzn//84osvzsOc+bVXfhaDBOW2s+pJ21Ezvu1BQWKvPO4oCsoFUtv/8pe/XLp06blz54KSjZ96BoESyV999dVHH31UVVWFlOEElBW4eRPEkzuCrhsQ6sxvOxrr8WYl7y4QVgoN6qPjyjXx+/3Z2dkFBQWS9nl5eYWFhW63e3BwMDMz88iRI6zKyclJjUZjs9nOnj2LE6Xk5ORcvHiR1ek8HMXPIMIRyHlrTrZT6+dhe7AgHULaGKxUK16vV6PR2O12tLV64WIle8dxpZKRQCrDuYQVuIXoHKxPdNB1A0Kcp2+O4XS6kDlmZGSktrZW0t7n82k0GjLTV1JSErVS0inSxOFw4FRgrE6D66j5zTHKbWfVz8N2NVBj4KkRo3nPMZzHbjCswC2EYDlBDd2AECfwHNPT05OVlaXX6+Pi4iwWy8DAwOTkJP4bZLVaGxoatm/fjttXV1dbLBbJiPT7/fv27dPr9WvXrj169CgnQ5fZbK6vr0ev7XZ7eHg4HpGlpaWlpaWkZLfbvX37dr1en5SUdPz4cfTRJdU7efKkXq8/ffq0yWSKjo4uKirC0qiwkrDhYlRUFOuROvQbc3h4+PLlywkJCUjhpqamgN1R1aN6TJLaKy8vT6/Xm0ymEydOkI/1yQVKQjZv21n187a9vr4e32bAaTp9Pl9paanBYEhISKipqcGjRT4UJcnfJHHHfVEFomtPnDhhMpmioqIKCwvlY4M8Z8xqteLuhoeHdTodyknq9XqjoqKuXr3KiprIGKgc51PlkMr84Q9/YAWUHzi5w1m2YOSDh+NPakDV0w0IfQLPMUajsbm5eWJiYnh4+NSpUygnLs7kPzMz43a7tVotTiubkpLyxz/+UTLHVFdX7969e3h4eGBgIDs7u6GhQRRFgwxRFJubm/GMVVtbGxYWhnPcJiYmfvjhh6Rk9Ji3y+UaGhpKSUnBH12s3vDwsCAIxcXFHo9naGgoJyfnwIEDHGMXMseIolhRUREWFqbVapuamiYmJkwmU8ClLZZ6VI+RXVssFrPZPDY2NjQ0lJqaSj6mThVIhmzetnPq52c7GT78RP2+ffvy8/Opj/pLhqJEGTLuZD1VIFJgz549Ho/H6XRmZWVJkh/L/UZ2V1tbu3XrVlEUy8rKUIZpVtRE9kBleZslh1SGFdCAKQzkDqfawnIC359U+arqBoQ4AeYYVkJ+yViRZB13Op2SOcZgMPh8PvTabrdnZGSIjATmypPqc1K7k0s3AuNsAvGbZwpQ7ZrrHCOKos/nQ8rX19fX1tb29PTk5uZu2bJl9+7dyECyU456VI/hrpHtOAc+tp0jUKL2/Gzn1Cuxnex3hJFFn5XenzoUWTqT9fwjD6jHDUhiRF2emp6eTk5OrqmpMRgMY2NjqJIaNc5AJb1BGkKVw1GGI0ryPU49toBqC8sJfH9S5auqGxDiBHgGc8WKFQUFBZmZmTk5OSgHzE9+8hN5M7PZ3N7e/tprr7W3t+fl5YWHh5Pv3r171+v14syJs7OzYWFhgiDEx8fLRa1evTopKclms23atMnj8Rw9ejQpKenRo0ednZ3btm1DFyLGx8cFQVizZg0qJicnU03Q6/V4x05cXNzExAR+Ky4uzmaz8T0wV9BRiY8ePbJarV1dXSkpKZ2dnc8999yf/vSnPXv2fPzxx5JOqeqxPIYZHx+fnZ1dv349KpK2c+wleSK2S/rVarVk+FwuFzJtenqaNA19ASkcinJYAoVv+iohIQH7SolzFi9e3NDQsG3btjNnzqxatUpgR40zUKkdBYw+FSU6Ux1OtYUjkONPlvzHphsQggQeu6yE/CT8rON+v1+j0fT29uKPikajERgJzIXHm1QfnykQXFpbW3Nzc/1+//T09HPPPScIQlZWVkVFhcJOWR4LIk/E9gX2Kx+KlZWVQdObQKGSY2NjGo1mbGwMFecRNWpH84v+AgMqsWXhAklCWTdAbRR9c/ET8guBso6vXr1ap9NNTEzEfw0aH9QE5oLiFPEKU7svBIPB8ODBA3z6utvtNhqN1ErJhU1NTW+++ebs7Ozs7CyqIV8HhOUxjNFo1Gg0o6OjqDg4ODg/AzmwzAxovnLbqVn0+ScUBByKchZ45AGLqampysrK8+fPNzU1ffbZZwI7anMdqAGjz4cTINaxBXJbOHD8GfAYBbV1A0IR/lIaKyG/JLG/+M2s45Js7aIoHjhwIDMzE/0Cra+vP3bsGL9fhSniWandyYMGOPdOREaqdrImNze3qKgI3xZG2/mplRi73b5nzx5RFKenp/V6fVtb2+TkJErFj3TDG4E46lE9RrYvKCgwm80jIyMOh4O858+5WSIJ2fxs55vPt500f4SdRZ+a3p86FOX7ralxn8eRB+TpANRbIGVlZegwytra2uzsbE7URO5ARd6QfGRYckgFOAGlBojjcKot5ECV9MXyJ0u+qroBIU6AOWZ6erqmpiYpKSk8PNxoNBYVFeHbbjU1NTqdDkca/QvBxaqqKvJdv9//5ptvJiQk6HS6vLw8fMOQRWFhYUFBAS6mp6dXV1eLsu8Fckso3r9LqifZwyr5HpF/q8prxsfHCwsLo6Oj4+LiqqqqpqenWZWYkpISh8OBXre3tycnJ+t0ui1btqDTQTi3bUn1qB4j24+NjeXn56O9y3V1dQHnGPGbIZu37Xzz+baTvaAXdXV1CvcuU4eiXGdq3Dl7bam+YsUIv+7t7dXr9egetd/vN5lM77//PitqInugksLJjwxLjkRnVkCpAWI5nGULpy+OP6kBVVs3IJQJWm5/yDquEDWyx9+4cWPr1q3/+9//gihTJbD5IZ5F//HwOJ2g9jEHC7HlW3YEA0AStDvJkHVcOUE/jN1ut+Nju0IfOIueJJS9AboBQSAo/4YmJydzcnLee++9oEj7dsN5ClKC3W6XPzFqMpnsdrsoiseOHWtubh4fH79+/XpiYuLTsjyNzV/IcofJZOrt7d29ezdeuX1KUT4YFs5cHT5X3bB8PERDRzfgCRKc/zGQdVw5S5YsWbRokZKWxcXFkh1Qn3766ezs7PPPPy8IQnZ2dmNjY0JCQlFRUUVFxd69e9XQNugoN58FcsILL7wQHh6u0t7lx8bCvaEe89ONHKLqEcp+A6Q86UnuW8i8f6GjLVjoNcoAJtn6VVtbW15eHlCO1+stKioyGAyS26qS0FMfvX5sUPVRogx2Ql9fX2xsLK7v6upKS0vT6XSZmZl4i0FwFQ66o8iIBxGJqir1QkXhEAW+O8AZZSEE+i5Ar30+n06nW7JkCdkAPzPEZ8+ePbOzs3a7/erVq11dXceOHUP1KOUUora2NjU1VRCEdevWkckWHydUfQKCnRAdHe3z+XD97t27a2pq3G53bm7uvn37gq6tGo4iI64ej6cXhMIhCnx3gDnmqeHWrVtOpzM7O5vf7P79+x0dHY2NjfHx8Rs3bjxx4sTFixcFQdBqtVlZWUu+5vz58/iuqWQmezxw9OHAccLMzEx6evqKFSvS09Onp6eDrrDwhBz1FKFwiALfLQL+05HvhR9hJ0Un39LpdLt27fJ6vZWVlQaDITo6uri4GGf6Y4nF/Uqe7ZDndRfZqdTlwnft2lVbW4ulZWZm4gcRWCn0jx8/bjAYYmNjm5ubWc7p6enJzMzUarUGgwE9QSbKVioUdiHJoC5fmWlqakIPo83p+AP5Y6dIbYPBQD6aoNwcSXJMJbFGT4fodLrExMRTp05x9BlhH3YgcYJcMfQUcFlZWWpqKn5Gh9qS6hMS6miR5IWsqqoyGo06na6goMDr9aJ6eaw5HxZJxKnjhB/ryspKatRIVanjSknUOIOBdSACGR0AQAT+H1NRUeHxePr6+jo6Otra2hobGwVB8Pl8/f39Nputp6fH5XJVV1fj9j6fz263X7t2zW63ezye5ORkr9fb399//fr1kZER3JIqlkN+fn5xcbHL5bp27VpWVpZWqxUE4dixYw8ePOjv7+/o6Oju7m5qamIJ37VrF049cuvWLbvdbjabORJ8Pt/g4KDD4bBarSgVW4wMQRD6+vpKS0vHxsYcDkdCQkJ5eblcc4VdREZG4gzqRUVFcjl4FQLl2kGV7e3ts7OzHR0dqNjZ2fnyyy/zPSkIgtVqLSwsXLx4saReiTkkCmNdXl4eERExODh45coVq9XK1wfJREPL4/FUVVVRnSAHJQO2Wq0dHR3f//73AzoBI48sa7Rg6uvrOzs7Ozs7nU5nXFzcwMAAqqfGmvVhkUScei0/1ii7Ej9q8nGlMGossZzPPiyUART4UxA1jzcnKTp6izznTqPR4Md9bTYbOhuRJZb1Y5N1xAArlbpc+IMHDyIiItADw42NjTt27OBIQFZMTEyQfVFPIiAZGhpCt6CV5GmndsFJAeDz+fR6PWqv/PgDkfab3e/3R0VFoXOf5B0FNEeSj11JrFmZ7eX6jHDPYiCdIFGsubk5NTV1bGwsOzs7NzcX6W80Gqk2Snwijyx1tJBCjEYjdiCJPNacD4tEJnWc8GMtSTAhfh01ub3kuFISNapYURYg0hxJdAAAESDvMiuPNyspOnorMjISvxUREbF06VJUjIuLQ3dNOenBqVDzunNSqcuFL126NC8vr7W19Re/+EVLSwta+uckUdfr9ZLnSaknEfz73/8+dOjQwMDA9PQ0NfPjnLrgcOXKlYyMDNRe+fEHVFpbW9euXfuDH/xgHuZIUBhrgXsEg0QfztkEpBMkVFdXd3R0rFq16vz586mpqW+//TYaKnz9EdTIykcLZmpqamJiQr5DgRVrzocl4LX8WKN/fmpEjSOWZQ4nOsB3mcC5/UMEeV736urqOaVA37VrV0NDQ1FRUU9PT0tLizDHJOrUkwjMZnNJSUlTU5NWq0U7miRtgpWlX7IKsZDjD6xWK2vbVUBz1ICjjwTWUszt27cnJibQLLV69Wqr1Wo2m3t7e9EiZ0CokZWPFgny5zOosVa4+4AzTgLGWqWozVUsLJQBdPh/c+a6qMVflMBFqth79+5pNBrybzjrxqzdbkeHxuv1evmSBeucPr/fHx0dffr0aYvFghtTJVCXj+QrKuPj42FhYaRW1MSUyrtgrZXNzMwYDAYykajNZsvIyNixY8fly5dFUWxsbKyoqIiNjfV4PD6fT6PRkIshSUlJpBVarXZ8fFzeKcscVlyUx5pcK2ttbZWsU5H6cGTKnYAboy7IDMSlpaWCIOA7//yhRV0FlY8WyVoZ9VF2eawDegm/Sx0nIjfWIiNq/LUyJVFTOLbJKEuiAwCIwPvK5Hm8Fz7HUMWKopiRkVFSUjI2NobyfuPGrCMGWCnQqcJFUSwsLIyIiLh48SJWKWAKfT5Go7GxsXFyctLpdJrNZvylHDBPO7ULMoO6y+XSarWovru7OyUlRd419fgDkZt7v66uzmw2k3IkX51yc1hxUR5rVmZ7uT4cmXInDA0N4XfLysq2bNnicDi8Xq/VakW79UjDWUOLg2S0kLqh0wr6+/vdbnd5eXl3dzeql8ea7yUy4pzzLzixFmlRk4xAshflUaMOBtbl1CEKAKKSOWZOm4yVj2BqevChoaGcnBy9Xr9p06YzZ87gxqwjBlgp0KnCRVFsbW3V6/X4DidLgvI5pru7Oz09XavVxsbGHjx4ECscME87qwucQd3v9+Pf5pWVlehoAxLW8QciN/d+cnJya2srKYfUhGUONS7KY03uXZYcwSDRhyNT7oRLly6lpqai136/v6qqymQyabXazZs3f/DBB8PDwzqdDn/7s4YWB8lokfyzPHTokMFg0Gq1ZrOZ3LssiXXAbdNkxFnnX3BiLTKiJjlcA/eiPGpUsazLqUMUAEQlcwzwpKioqMjJyRFFMSkp6fr16yr1onxCDVZ3Sr7f5UicgE4T4Ty6BDxOVB2iwFNN0M6PAYLOw4cP7Xb7iy++qGovj/kojtHR0bS0tLt37y5c1N///vcf//jHC5cDAIB6QC6Z0GXx4sVqTzAPHz602WwJCQmq9qISMMEAQOjz1OxdBtSgtLS0ra2tubn5SSsCAMC3E1grAwAAANQC1soAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFALmGMAAAAAtYA5BgAAAFCL/wNVCI7wjGF61QAAAABJRU5ErkJggg==)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAP20lEQVR4nO3dbUxbVR8A8DtAaKEUGNAB6+QlhJdlmcwhgmFI5pyzNqROxhasDiNhC2GIhC2IirjpYOBMZAsh8yXABzV+IITgQkyjpCBZkLHCgJVKEEopyFqkUFiHpX0+nDw39+l96S3dBbbn//vU3h7O/d//OZdD7y3/7rDb7RgAAADAAY+tDgAAAMATC9YYAAAAXIE1BgAAAFdgjQEAAMAVWGMAAABwBdYYAAAAXIE1BjwGoqOjBwcHtzoKAIDLYI0B293du3dtNtszzzyz1YEAAFzmfI3ZQcXf338TgttMJpOpurranR6mpqYo00K33dU2DN5//30+n9/c3EzcSDwiN/vfMDb7dZr59vb2rKwscs9BQUHuxkfyCBPlUoTu7Jejwd2cOePOWUPk/vkLOOJ8jbFYLBaLRa1WBwYGoscajWYTIttki4uLly9f5qLnyMhIg8HARc+I0Wisr6+/deuWXC4nbufuiNhjc+xO46RcYwCO6wn2WNgOsx1Q8nLawsfHB8MwHo+HP/b29uY6rCcMyhtHzGazr6/vtr2U5Oaxz87OajSazMzMRxTOk4nTCQaAOzZ+P+arr76Kjo4ODg5+6623TCYTvv3hw4fvvvuuv79/ZGTkJ598sr6+Tvwp9Ba4rq5u165dQUFBp0+ffvDgAXrpjz/+SEtL4/P5oaGhJ06cmJmZQY2rq6tDQ0PDw8O//fZbymZ4t1evXo2Ojvbz8zt58qTRaDx//nxoaGhwcPA777yzsrLCEJ7JZIqKijKbzTt27EBXnMjNKINhA3/XTwwyKCjozTffJOYNNzIyEhwc3N3d7bB9ZWXlzJkzoaGhe/bs+fTTT1HkRqPRIXKEfER0Q8Y8Xijhhw4d8vf337179xtvvHHv3j0Mw9bX1z/44INdu3b5+fmdOHHCaDTiB0hMkcOxk8edMk6i9vb2o0ePPvXUUxiGzczMvPLKK/7+/vHx8d9//z1DZl5//fW6ujr06uDgoI+PD368Z86cOX/+PMuxoEs75SRkiBDHMP8pB4i5PbFPhsHCnTx58vPPP8efpqWlNTc3O1yVorzEx5AuyvnD/sxFrly5wnCAdHvBkWcR5aiBLbHBNcZsNqtUqt7e3r6+Pr1eX15ejr908eLF1dXVoaGhzs5OpVLZ2NhI/tm+vr7+/v7+/v6BgYHa2lq0fWBgoKCgYG5ubnh4WCwWFxUVocZqtXp4eLipqSk9PZ2uGR5ST0+PSqXS6/UJCQkGg2FoaOjWrVuTk5MVFRUM4QUEBKjVaoFAYLFY0BUnymbkYDaQt6GhIZQ3rVaLR4UzmUzHjx+vqak5dOiQw0vFxcV6vX5gYKCzs7O9vb2hoQHDsODgYIfIEfIR0Q2Z0/GSSqV5eXlarbanpyc9PR29o62trVUoFAqFQqPRREREjI6O4gdIlyLKcSfH6YB4oayoqEgoFI6Ojt68eZP4G5ycGalUqlAo0KsdHR02m62zsxM9VSgUEomEzVgwpJ1uEtJF6DQPDANE154S5WDhcnJy2tra0OPZ2VmVSiWTyRh6cwibMl1088elM7f/v+gOkHmWkmcR5aiBrWFnZ3JyMjAwEH+MYdjS0hJ62tvbGxMTg7cMCQkxm83osUqlSklJcegHwzCtVouetra2Jicnk3c3Pj4eFhaGGi8sLNBFhZrh3S4uLqLtPT09Hh4eq6ureISxsbHM4U1OTgoEAoajcBqMQw/k7Q556+npwfOGt5FIJIWFheROrFarQCCYmJhAT9vb21NTU1nul7xr4pAxj9fCwoKXl5fFYnHoXCQSDQwMkPfokCKHY6ccd7r47Xa72WwWCASoQ6vVyuPxiD2gCUmZGb1e7+vri8JOSUkpLS3Nzc1F+xIKhWtra3Rj4RAMQ9px+CSki5CcInIe6AaIzfmCx0w3WLjV1VWhUIh6a2hoyMrKIh8yfqYzzB/i1KWcP66euZQJYT4f6ZJgZzdqYNM4vx9DSSAQ4O+vIyIiFhYW0ON//vnHYDBERUWhpzabzcvLcRc8Hm/Pnj3ocUJCglarRY/v3Llz4cKF0dHRtbU1m81ms9nQjhzeuVM2Qy0DAgLQY7FYLBQK+Xw+HiG6KcomPIZm5GBcRcybWCzG84Z8+OGHnZ2d33zzDfkH5+fn19bWoqOj0dOEhAR0cm5s1/iQOU1IUFBQdnZ2amrq4cOHIyIikpOTX3zxRZPJtLCwsH//fsq90KWIbtwZ/PLLLykpKajD+fl5DMOIPaAHlJkJDw+Pi4vr7e3du3evXq+vrKyMi4tbX19XKBRHjhxBV96Yx4Khc4xmEtJFyDIPdOcU+7xRDhaxAZ/Pl0gkbW1t586da21tzcvLo+uKjDJdDPOH/Znr9ABZnrY4908W8AhtcI2hY7FYPDw8+vv78Ung4cH2cpxMJsvPz29sbOTxeDqd7tixY+40cyc8ymZra2vsd7QBq6urra2tP/74Y1FR0fHjx/H1klNsEvLDDz/cvn17eHhYr9eXlpa+8MILn332GYZhnp6eXIfnzifKJBKJQqGYmJiQSqUBAQFJSUlKpRK/UOYmdyYhp8iDde3aNWKDnJyc69evy+Xyvr6+1tZWN3fn0vm+4aS581sFbLlHvMaEh4f7+vouLCwcOHCAro3FYpmenkZ/uWg0mqeffhrDsPv37+v1+o8//hi1ofssJstm7oRH12xqasqlfbnKw8OjtbU1MTGxpaXlo48+cvjVIBKJvL29//rrL/TXmVqtxv+scwfLhBw8ePDgwYMYhkkkEqlUeu3atZ07dw4ODrr0YTbKcWewvr7e0dFRWVmJnopEIgzDiD3g2ykzI5VKS0pKwsLCzp49i2GYTCZra2vr6ur68ssv2cdM2TndJKSL0M08uNqePFjEVyUSSX5+fktLy5EjR9D7kp07d66uri4vL6OnOp2OuX8ilvMHYzxznR4g+70gHJ0sYINYXlNzuB9DeQEXOXv2bGpqKvpLqra29uLFiw79YBiWnZ2t0+mGh4eTkpKqqqrQSyKRqKGhYXFxUaPRyGSywMBAyiv15GZOQyI+pQvPbDZ7eXlpNBq6Zgy3DYhpsfwvq9VKvCdBFyTxJbVazePxhoaGHPrPz8/PysrSarXDw8PPPvtsfX095XDgiEfEsGvm8RodHT127Nivv/5qMBi0Wm1+fr5UKrXb7ZcvX05JSRkaGtLpdEVFRUqlkjISh/sxlOPukHmcUqnct28fcYtMJiP2gB8CXWZEIpFIJEL3J3Q6nVAoTEpKokwanpClpSUvLy+1Wm21Whk6p5yEDBHi90jo8sBwU4Qub+Qk0w2Wg9zcXKFQ+NNPP+FbUlJS8vPz5+bmNBpNeno6ORWuzh+XzlzKA3QYCOZZaifNIropATbfo19jLBZLSUmJWCz29fWVSCT4nTfiz9bU1IhEosDAwLfffhu/M69UKpOTk3k8XlhYWGlpKd0aQ27mNCTiU4bwqqqqfH19m5qaKJuxWWPIS3hjY6Ora4zdbi8uLs7IyHDo32w2FxQUhISEiMXiqqoq/JcgQ2D4ETHsmnm81tbWqqqq4uLivL29RSKRXC6fm5uz2+1Wq/XChQshISE8Hk8mkxkMBspIHI6dctwdMo8rKyurqKggbtHpdEePHhUIBHFxcV988QV+CHSZyc3Nzc7Oxn88OTkZ75AhIeXl5cRgKDunnIR0ETrcPKfMA/ONd7q8ORwL3WA5aGtrEwgExH7Gx8cPHz4sEAj27t1bX19PToWr88fVM7e2tpZ8gMSBYJ6lCHEW0U0JsPl22O32TXrHhGEYhk1NTe3bt295eXkzdwq23AbGPT4+vqWl5fnnn+cuqs3nah7gfAGPu0d8PwaAR2VsbGyrQwAAuAs+ngEAAIArsMYAAADgCqs1prm5OTExkc/nJyYmOnwU0lWRkZEbuLi8vLz83nvvRUZG8vn8+Pj4K1eu4AXE8DauFvem7JP9j7tatX6rqutvExsb9yePq3mAvIHHntNPBdy4cUMsFnd0dBgMhq6urtjYWPIHB7mWnZ0tk8nUavX8/LxCocjMzOzr67MTPhJqZ/x4lUt9ssdQtIMyJKftAQDgCeP8c2V79uz57rvvXn75ZfT0zp076enp8/Pzfn5+3K+AGIZhDx48EAqFBoOB+V/fXfoEDss+3QQfCgIA/J9zcq3MZDLpdDrit3ccOHCgq6sLoynfTVdSm7LkOHMdchyqa0SuUES8+sSmOD+bPjHOqtYTo2WolD47O/vaa6/5+/tHR0dfvXqVi696BACATeNkjTGbzTweD9UQxD333HPoTQy5fDddSW3KkuPMdchxfn5+Eonk1KlTv//+O/41MA5YFudn0+fmVK2nq5ReVFTk7e09Pj6uUChaWlqoRwUAAB4XzJfSGG5ykMt305XUpiw57rQOOdHS0lJ5eXlcXJyXl1dsbCz6x13y/x67VAycsk87Z1Xr2VRKR8Xh8QRSFocHAIDHiJP/wfTy8rJarXSvOpTvpiupTVlynK4OeWhoKN7h/fv30QN0naq6uvrhw4cDAwOlpaVWqzU/P58uMDbFwCn7LCsr25yq9ZSV0ufn5202GzGBTvsBAIDtzMkagy71/Pvvv8TLZbdv33b11x9lyXHKjSqViqEfHx+ftLS0+vp6uVzOsMa4VAyc2GdZWRm2KVXrAQDg/4GTNSYgIEAsFiuVypdeegltGRkZycjIQF/H5IC5pDZlyXHyxt27d5N7XllZIX6MDdUzZgibTTFwyj4DAgI2oWo9HZFI5OHhMTU1FRkZiWGYWq3eWD8AALBNOP8fzMrKyry8vJ9//tloNHZ3d+fk5FRUVFB+cNnT0/PUqVMlJSXT09MjIyNVVVW5ubkYht27d+/VV1/97bffjEbj9PT09evXk5KSKDdSBjA2NhYTE/P111/Pzs6aTKbu7u7CwkLym5iQkBCLxfLnn3+ip3K5vLCwcGRkZHZ2tq6u7tKlSyz7LCkpKSgouHv37szMzLlz57q7u1mkESstLZ2ZmUFHLZVKKUNyytPTE33rydTUFOqK5Q8CAMA2xeamTVNTU0JCAo/Hi4uLY/7aEsqS2pQlx1nWIUdu3ryZmZkpFAp9fX33799/48YNygCYi/Oz6dPOWdV6uvv/9v+tlD43NyeVSgUCQVRUVE1NDdzzBwA81ja7tv+Th7t/tBwbG8vIyPj7778fec8AALA5oCbm9qVSqWJiYrY6CgAA2Dj4/pjt5dKlSxEREVlZWRMTExUVFfi32QMAwOMI3sdsL5mZmQ0NDWKxWC6XFxcXnz59eqsjAgCAjYP7MQAAALgC72MAAABwBdYYAAAAXIE1BgAAAFdgjQEAAMAVWGMAAABwBdYYAAAAXIE1BgAAAFdgjQEAAMAVWGMAAABwBdYYAAAAXIE1BgAAAFdgjQEAAMAVWGMAAABwBdYYAAAAXIE1BgAAAFf+A+0t+uuLTRyHAAAAAElFTkSuQmCC)

Screenshot: winplc7.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 10 September, 2020 13:02 GMT
Vulnerability Verified: 10 September, 2020 13:12 GMT
Website Operator Notified: 10 September, 2020 13:12 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 10 September, 2020 13:12 GMT
Vulnerability Fixed: 13 September, 2020 11:21 GMT