Lucene search

K
openbugbountyInetizen01KOBB:141410
HistoryMar 14, 2016 - 9:37 a.m.

getflywheel.com XSS vulnerability

2016-03-1409:37:00
Inetizen01K
www.openbugbounty.org
12
Vulnerable URL:
https://getflywheel.com/?s=%22%2F%3E%3CscRiPT%3Ealert%28%22XSSPOSED%22%29%3B%3C%2FscriPT%3E
Details:
Description Value
Patched: Yes, at 11.04.2016
Latest check for patch: 11.04.2016 18:35 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 42058
Google Pagerank 5
VIP website status: Yes
Check getflywheel.com SSL connection: (Grade: A+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 14 March, 2016 09:37 GMT
Generic security notifications sent to website owner 14 March, 2016 09:39 GMT
Customized security notification sent to website owner 14 March, 2016 09:39 GMT
Notification sent to subscribers (without technical details) 14 March, 2016 10:17 GMT
Vulnerability details disclosed by researcher 25 April, 2016 10:11 GMT
Vulnerability patched by the website owner 26 April, 2016 00:33 GMT