logo
DATABASE RESOURCES PRICING ABOUT US

musikzone.cz Cross Site Scripting vulnerability OBB-1341521

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[musikzone.cz](<http://musikzone.cz>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![musikzone.cz vulnerability](/twimages/screen-1341521.jpg) **Mirror:** [Click here to view the mirror](<http://1341521.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 16 September, 2020 13:29 GMT ---|--- Vulnerability Verified:| 16 September, 2020 13:45 GMT Website Operator Notified:| 16 September, 2020 13:45 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 16 September, 2020 13:45 GMT Vulnerability Fixed:| 17 September, 2020 08:07 GMT ---|---