Lucene search

K
openbugbountyBadmaxxOBB:223573
HistoryApr 07, 2017 - 6:58 p.m.

kruizinga.de XSS vulnerability

2017-04-0718:58:00
badmaxx
www.openbugbounty.org
8
Vulnerable URL:
http://www.kruizinga.de/search?q=%22%3Eblub%3Csvg%2Fonload%3Dalert(%2FOPENBUGBOUNTY%2F)%3E
Details:
Description Value
Patched: Yes, at 21.06.2017
Latest check for patch: 21.06.2017 10:25 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 842106
VIP website status: No
Check kruizinga.de SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 7 April, 2017 18:58 GMT
Generic security notifications sent to website owner 7 April, 2017 19:01 GMT
Vulnerability details disclosed by researcher 5 May, 2017 19:16 GMT
Vulnerability patched by the website owner 22 June, 2017 00:42 GMT