logo
DATABASE RESOURCES PRICING ABOUT US

renterspages.com Cross Site Scripting vulnerability OBB-1379195

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[renterspages.com](<https://www.renterspages.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAW00lEQVR4nO2df0wT5xvATyxQasGCpSK/Bswxo4ShYwQZ80vM4lhHWFVEhkzRGWWMICHqsFsYQ4MGkUynhBhdmCHOPwghhpjGNMYxwhgiQ2w6bLDBrqsMawVWsWOV+/7xfvfmvnf3vj0KRYT381ffe9+793me97l7eu/d+9wimqYpAoFAIBA8gNeLFoBAIBAI8xYSYwgEAoHgKUiMIRAIBIKnIDGGQCAQCJ6CxBgCgUAgeAoSYwgEAoHgKeZujImOjr5z5w6qSJhPkMElEOYrczTG3L17d3Jy8o033uAtEuYTZHAJhHmMixjz4MEDf39/3qrR0dHjx4+jitPk6tWrmZmZqOLLwszaZL7CHNwnT57s3r07ODg4LCzs888//+eff2ZTEoy3L+JjNmXzNLPjq9xefvzxx7Vr1y5ZsmT9+vV37971UL+PHj3y9vb+6aefmBsfPHjAHM2IiIgjR44wXW52ZJv/0FgGBwelUqmQKkxLN0hKSrp+/Tqq+LIwszaZrzAHNzMzMzc312w29/f3p6amlpWVzaYkmPFyOBwOh6O/v18mkzn+ZTZl8zSz46vcXkJCQlpaWmw2W0VFRWJioof6PXPmjEwmKygo4AoDhnJ8fFyn06WkpHz55ZezLNu8Zy7OlT18+NBgMKSlpfEWCfMJ5uA+e/asp6fn/PnzYWFhr7/+em1tbVNT04sW8H/4+vr6+vqKxWL429fX90ULNR9wOp2JiYmBgYGJiYkTExMe6uXy5ctnz55taWnh3hmDofTz81uzZk1NTQ3T5WZHtnmPoBhz+vTp6OjoZcuWffzxx6OjoxRFjY6ORkVF2e32RYsWff/998xibW2tv7//yZMnly9fHhgYuGvXrmfPnoHj3Lp165133vH39w8LC9u6detvv/3G293Vq1c3bdrk7e3NKm7evPnkyZNg4507d3x9fYEwFEXt37//0KFD+AavvfYafnemDGDa5Pjx48HBwStWrLh48SJFUX///fcnn3zi7+//yiuvfPXVV8+fPwfNTp06FR0dHRgYuGPHDnhMlokwu7N64bUSaImy6vr16/38/IKDg7dt2/bHH39QFPXw4cMPPvjA398/Ojr61KlTgYGBoDFXBoFD8/z58yNHjixfvnzJkiXbtm17/Pgx2P706dP9+/cHBwdHRER8/fXXLJssWbJk+/btjx8/PnToUHBw8LJly3bv3v306VPesfbz8/v999+XLFkCqgYGBkJDQ1GyYRRhWYPXyCh1eL0dxblz59577z1Y/OKLL7Zu3YoaJpTAKFCKcA8+Vd/gGoTlq8JHkFcp1EnBPSMoiiosLFQqlZ999plarb58+TLXCKyhxyiL4v79+2azeceOHevWrbt27RqmpY+PDzOWuCebQM9fOLiOMXa7vbe3t6Ojo6ury2KxlJWVURS1dOnS/v5+cKeZl5fHLG7evNlut3d1dXV3d3d3d/f09FRXV4NDZWRk5Ofnm0ym9vb21NRU8K+QC+phTEZGhlarBRtbW1snJyc1Gg0oarVapVKJb6BSqfC7cxXv7+/X6XQNDQ2pqakURVVWVo6Pj/f19Wk0mra2tvr6etCsr68P2MdkMqnVarA7y0SY3Vm9oKyEsmpPT8++ffuGhoZ0Ol14eHhRURFFUUVFRT4+PgMDA1qt9tKlS1ApXhmEDE11dbVWq9VqtQaDITQ0VK/Xg+3FxcUWi6Wnp0ej0Vy9erWurg76THt7e29vr8ViWbVqldVq7evr6+zsHBwchCbijjXk3r17Bw8erKmpQcmGUoTXGlwjo9Th9XYUKpWqra3tr7/+grq8//77qGFCCRzMAa8I78Gn5Btcg3B9VeAIopTiPSm4vVAUJZVKjUZjQ0ODRqNZs2YNy8K8Q49SFmXJxsbG3NxciqLy8vK4oQLy5MmT8vLyvXv3wi3uySbQ81HSzkPwU2mDg4MURY2NjYFiR0dHTEwMrOJ9HgN2MZlMYHtzczOYyrTZbCKRiHcW22QyRUVFgd92u10qldpsNm7RYrFIJBJwhKSkpNLS0tzcXNBjQEDAxMQEvoHJZMLvzlUcigGQy+V2ux387u3tTUpKYtmnvb0d2odrItTuzF5QVkJZlcXAwEBISIjT6RSLxUajETaWyWQoGTCdMlEoFD09PayNTqcTnIegePXq1eTkZCDqyMgItImXl9f4+DgodnR0rFy5EvxmjTXEbDbHxMRcuXIFIxuvIrzW4B1KXnUw3g4bQEsCkpOTm5qa6H/H2mAwoIYJJbCZA14R7sGn5Bs0wreZvip8BHmVwpwUrDPiwoUL8fHxQ0NDaWlp6enpQEiFQgFqeYceoyzKkrGxsTqdjqbp8fFxhUIBBQOHksvlcrk8KCjIy8sLyDBN2YTYDSPt/EPkMghJpVL4sk1oaKjNZnO5i1gsjoiIAL9XrVplMpkoigoMDMzKykpOTt64cWNoaGhiYuJ//vMfeNiOjg7w+/r160lJSXBuh1lcsWJFbGxsR0fH6tWrLRZLeXl5bGzs8+fPtVrtu+++6+3tjW8QERGB352rOBSDoqgnT55YrdaoqChQnJycFIlELPuEh4ej7IPZndkLxkq8VqUo6tdffz18+LBer5+YmJicnJycnBweHp6cnIyOjoaN8TJgOgWMjo7abLb4+HiWUsPDwxMTE8yOwGkmlUqXLl0KbRIQEODn5weKoaGhVqsV/GaNNSQrK6ukpGT79u0o2VCK8FqDa2SUOtTUvV2lUrW2tm7durW1tVWpVPr4+PAOE0bgsLAw3iPzKoLyAeG+AdXkmp1lB5cjiFFK4EmhVqs1Gs3y5csvX74cHx9//PhxMMqgFuWWKGV5LXnr1i2pVAruQvz8/NLT05ubm3ft2gVqJRJJb28v+G00GktKSk6fPn3gwAG3ZRPo+Shp5yWuY8wM8sMPP9y+fVun01ksltLS0pSUlG+//ZaiqMWLF69YsQK0wb+1rFQqtVqt0WjMyMhYunRpQkJCW1sbc6YL38Dl7hgcDoeXl1d3dzc8kby8vIQ/CRS+O8pKKFQq1d69e+vr68VisdlsTk9Pn5IMwjtdvHixQGUFwjtR9vDhw76+vp9//hlu4cqmVqtRigi3xoyos2XLFjD51tramp+fj2qGsTx3kuTRo0fUVBTBMCMHQYFRSgiPHj2y2Wxr166lKGrFihUNDQ0qlaq7uxvYE8Ad+oMHD6IOyGvJxsZGvV4PqxwOh8VigTHGy8sLXuvDwsLOnDmzZ8+eAwcOzLhsAqUVvvvLBP42hzshBucKBM6VtbS08N659/b2hoeHszY6nU65XA7nXlhFmqY7OjqSkpIyMzOvXbtG03RdXV1xcXFISIjFYhHSwOXuKMUBUqmUNcGCsQ+31uXuGCuhrDo8PCwSiZjtZTIZmCsbHBwEG5lzZVwZMJ0yUSgUvb29rI2ouTK8TUCRO7jwmNyNXNl4FeG1Bq+RedXBS867habpuLg4rVYrk8nGxsYwzo+yPO+cCUoR3oNPyTe4anJ1FziCKKUEXjSAlxoMBthy3759FEWBeS0uYOgxFuZa0ul0hoSEdHV1wS0mk0kmk4HznWuHzs5OMK3ntmwC7cYrLe+R5wHuxxi73S4SieAwwCJwgqysLLPZrNPpEhISKioqaJrW6/Xp6ek3btywWq0mk2nv3r0ZGRnwyGBms62tLS4uDm5kFQEKhUKhUID2ZrM5ICAgISFBeAN8LZxg5T0PCwoKkpOTwT+X6urqyspKvFexTORyd4yVUFYFGtXV1Y2MjBgMBpVKBQTIyspSqVSDg4M6nS4+Ph5KxZUB0ylzurmqqiopKamvr89sNhcVFbW1tYHte/fuzczMNJlMOp1u3bp1Z86cEXim8Q4uaxQwsvEqwmsN3qHkVce9GFNeXh4fH+9ymFACo+BVhPfgU/UNXoMwfVX4tZJXKeEXjcLCwpSUFJ1OZ7VaGxoa5HJ5SEgIXKHCO/QYZbloNJrVq1ezNmZlZdXW1kI54WonvV6/YcOGwsLC6cgmPMYsHNyPMTRNV1RUSCSShoYGZvHUqVNSqfTEiRMKhUImk+3cuRM89ZqYmKioqIiNjfXx8VEoFHl5eUNDQ6xeDh48qFar4fFZRUBubm5WVhYsJiYmstrgG2BqMX/lAA6Ho6SkJDw8XCKRKJVKo9Ho8qrENJHL3TFWAi25VqVpuq2tLTExUSwWh4SElJaWAgGGhoYyMjKkUmlUVNSJEyegVFwZUJ2yZHM6nYcPH5bL5WKxWKVSWa1WsN1ut+/bt08ul4eHh1dUVDidToFnGu/gctujDMKrCK81eIeSVx33YgyY0AdDjBkmlMAoUIpwDz5V30DdPUNfFX6t5FVK+EXD4XCUlZVFRUWJxeJ169Y1NjYajUaJRAJCPsYteZXlsnPnzsOHD7M2fvfdd+vWraP/jc0QhUKxb98++EaA27IJsduCwkWMcQOX8z8YYmNjOzs7UcWFzHSs2t/fD9+HmTvMm8G12+1isRi8pjWdYXIJ6uAe7XSusaCUnR/M6jN/l9y7dw9TJLhHb29vTEzMi5aCzbwZ3OvXr6empuJf0yIQFixzMZcMYfocPXr04sWLjx49+uWXX9RqdUFBwYuWaH4yOjp69uzZ7Ozs6R/qzp07n376KWvjHPzqQXR09O3btz/66KM///zzRctCeAkgMWZ+kpaWVldXFx4enpeXV1xcDF/WJMws8KnA9A+Vn58P15oA5uBXD4BIb775po+Pz5Re1SUsXIRMqN28eTMhIUEikSQnJ/f19TGrRkZGqqqqPDOPNy3BUMzgfC7zdW34w43HemSKeWHCPHesVquXlxdr3fixY8eKioo0Gk1AQAB8yYKmabBCiKbpsbGx4uLiyMhIsVgcGxt74sQJp9MJ2qCqWA+6Ad988w2rSiQSxcXFgVQLXJFomu7p6QFZAwgEPIJiDCbH9Yu9PrqXfHumsrLPVIyZQZEILxEu32OEXz1QKpXFxcVgY3Nzc2hoKMjgAt5Q7+/vHx4e1mq1aWlpXV1doBmqivXCLgCGH1g1PDx85coVuVze2trKKxL5Y0QQiKAYI5fLwRKh1tbW+Ph4ZtWLdTWMYLOA2WwGL0Eyf/AmziIQuOBjjMVikclkII1ef3+/RCIxGo1OpzM2Nha8+Ds+Pi4SiWB2LCaYKswJy62qr69XKpW8IpEYQxCIoBgDVpkVFhbGx8czV7qOjIzAm+uGhoazZ89u2rQJ1qrV6p07dwJfrK6u5l0xsGfPHqlUGhkZWV5eDm/zhYMSDNDV1ZWamiqVSkNDQ7ds2aLX6+n/Pzd4pw2nLxVAo9EIbMO91tTU1ERFRUkkkuzsbKvVevDgQZC2Lz8/H6YgtFgsSqUSrICpqanh3j9h1K+qqgJryi5cuEDTtNPpLCsrUygUEokkKyuLOS3DAiwRAEu7rVarTCa7ceMGswF3uQxLKZlMlpubCy9/vNbmCskrNqYvVksuKLecakcuRwrVEevc4b2+Z2dnw2JJSUl2dnZdXR28XwfrGaE/sEYBVTWlGNPT0xMZGckrEquxEG8nLEwExZjq6mqpVCqRSLg5V2CybqfTaTabxWIxXMQUFxfX0tIC1+WaTKaBgYG4uDi4LletVufk5BiNRr1en5aWdvbsWbBdzsENwWiaVigUFy5csNlsRqOxtraWu0AMzhUcPnw4JydnpqQChISEbNy4sbu7m7e2q6tr48aNMA8uK+VtXl6e2Ww2GAypqalyuTw/P99isYBvecE5ky1btqhUqqGhoYGBAeZKfpfqUxS1c+fOoaEhjUbT399P03RVVVViYiJY9F5cXAxWmaH0PXbs2IYNG2iaLiwsBImrmezZsycjI4O57J/ZKdAiNTUVrqbmtTZXSF6x8X0xW3J1QbnlVDtyOVIY/2eeO9zru1KpbGxshEWbzSaXy2UyWUdHB9yYmZmZkZHR3t7ODSeoqinFGNbcL1MkVmO8txMWMq5jDD7HNcvVWKnOHQ7HIDoX93SynbsUDJMkn3Ui6XS6yMhI+Od9mlJB7HZ7VVVVUFBQdnY2M/GRwWDIzs4OCgqqqqpi/tWF4lEC0oNjsve7VJ8Slugepe/ExMSqVasqKirkcjnM1ADgTV8GO+VN9o5JDs8UkrsF3xdLQa4uKLecakcuRwrj/5i5Mt6vHuTk5DDvKmiaHhsbKysri42NFYlEK1euhPdYmKpBRkJ7AHiGz5WB5qSBYYrEFZjX2wkE1zEGXoAsFotcLq+qqurs7IQ5vliuduLEifz8fJqmwaIB0EAsFsMGer0ehAGQ7hs6elBQEH4tOvcPNV4wmqZzcnISEhJKS0trampu3rzJKzBN0ykpKS0tLeD3VKVyic1mU6lUzNSEIpFIpVIx58ox1xpUOgqLxeLj4wO36/V67n2MQPVHRkZEItGUpgTBp97A33kmLKkMBgP3Ro2pBcravBc77uMKIX2hQLml2x2hRgrVEY0d9+bm5o0bNzLF6Ovrk8lkcXFx9fX1XHUcDkdHR0dycjLzc/S8VYODgxKJhBluUWGDpRRLJF47c72dQHCxzl9IjmsmAlOdU1PPdg4/8yBcMCH56s+dOxcTE/Phhx+6JxVGQYqi7t+/X15e3tbWVllZCTdWVlbW1NQUFhZWVla++uqr+CNMhyl9I4Cb6B6j79DQkJeX19DQ0DQlnGZyeOFwdenu7vZERzMF96sHxcXFpaWlGzZsyMrKys7OZqUV8PX1Xb9+/ZkzZ/Ly8o4ePYqvYia0x2Oz2QICAlAiseD1dgLBxX2MyxzX3L8zzFTnNGeuwO1s51MVjAUzST4U2Gw2r1q1ijUjMR2pmBQUFEil0tLSUu4jdKvVWlJSIpVKCwoKaLfuYzDZ+4WrD+FNdI/Sd2RkJCQk5MqVK0FBQeA9AghmWgmlFK+1hdzHCOwLpQvKLd3uCHMfg/J/1Lhzv3rQ1NQUGRkJJuJUKhWc3WI9a2lra4OTkKgq994r44rEaozxdsICx/VcGT7HNStZN/3/qc5pxjNP87SznU9JMEySfHhubNmypampCT75nxGpIHl5eTAG8DI4OJiXl0e7FWNodPZ+4epDUHn7eSksLASzoMeOHUtLS2PVclP945USkhweJbaQvlCg3NLtjvAxhtf/meeOyWSCU2qsrx6Mj49HRUXBh+0Gg0EikfT19YFUp+fPn7dYLCMjI2AvsKgTUwUflOLXx1itVub6GO6HGAYGBpj6uvR2woLFdYzB57imORn+manO6X8dd0aynU9JMHyS/P8pz3dLN02p3MC9GIPK3g8Qoj4ElbefS3d3t1QqBf/KHQ5HVFTUpUuXmA0wr/nyaiEkOTxKbCF9oUC5pdsdYWIMyv9pxrnjcDjgfTnrqweVlZWsRVclJSUgul+7di0tLS0gIEAikcTHx58/fx62QVUNCl7nv3r1arjOn/shhqamptlfkUZ4GZn53P7MVOe04HOeMB3mZvb+ucysuaXwjoqLi8FD9Tn41QOWSODvBWrtEYHAZOZz+5NU57PP3MzeT5gSNTU1YA5gDn71gCWSr69vY2Pj22+//aLkIbxEzHCMAanOc3JyZvawBC5Hjx4NDQ3NzMw0Go1qtbq8vPxFS0SYFt7e3m+99daLlkIoJMAQBDLDr4rOYKpzAh6SvZ9AIMx9FtGcR98EAoFAIMwI5BtlBAKBQPAUJMYQCAQCwVOQGEMgEAgET0FiDIFAIBA8BYkxBAKBQPAUJMYQCAQCwVOQGEMgEAgET0FiDIFAIBA8BYkxBAKBQPAUJMYQCAQCwVOQGEMgEAgET0FiDIFAIBA8BYkxBAKBQPAUJMYQCAQCwVOQGEMgEAgET/Ffd+9VRjPeYyAAAAAASUVORK5CYII=) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![renterspages.com vulnerability](/twimages/screen-1379195.jpg) **Mirror:** [Click here to view the mirror](<http://1379195.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 3 October, 2020 11:39 GMT ---|--- Vulnerability Verified:| 3 October, 2020 11:50 GMT Website Operator Notified:| 3 October, 2020 11:50 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 3 October, 2020 11:50 GMT Vulnerability Fixed:| 6 October, 2020 07:55 GMT ---|---