directoryoftheturf.com XSS vulnerability

2017-10-21T23:27:00

Description

##### Open Bug Bounty ID: OBB-359789 Description| Value ---|--- Affected Website:| directoryoftheturf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat Sheet ##### Vulnerable URL: http://www.directoryoftheturf.com///search_results_by_keyword.cfm?q=<%2Fscript>">

{"published": "2017-10-21T23:27:00", "href": "https://www.openbugbounty.org/reports/359789/", "lastseen": "2018-03-15T01:21:09", "type": "openbugbounty", "bulletinFamily": "bugbounty", "modified": "2018-01-19T23:27:00", "enchantments": {"score": {"value": 0.1, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.1}, "id": "OBB:359789", "reporter": "OmniGooch", "cvss": {"vector": "NONE", "score": 0.0}, "title": "directoryoftheturf.com XSS vulnerability ", "openbugbounty": {"mirror": "http://359789.openbounty.org/mirror/", "patchStatus": "unpatched"}, "cvelist": [], "references": [], "description": "##### Open Bug Bounty ID: OBB-359789\n\nDescription| Value \n---|--- \nAffected Website:| directoryoftheturf.com \nVulnerable Application:| Custom Code \nVulnerability Type:| XSS (Cross Site Scripting) / CWE-79 \nCVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] \nRemediation Guide:| OWASP XSS Prevention Cheat Sheet \n \n##### Vulnerable URL:\n \n \n http://www.directoryoftheturf.com///search_results_by_keyword.cfm?q=<%2Fscript>\">", "viewCount": 5, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645396652, "score": 1659790929}}