Lucene search

K
openbugbountySehnoOBB:449749
HistoryDec 07, 2017 - 10:56 a.m.

soyonsradins.fr XSS vulnerability

2017-12-0710:56:00
sehno
www.openbugbounty.org
9
Open Bug Bounty ID: OBB-449749
Description Value
Affected Website: soyonsradins.fr
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://www.soyonsradins.fr/shopping/search?s_keyword=Try%22--!%3E%3CSvg/OnLoad=confirm(1)%3E%22#
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 7 December, 2017 10:56 GMT
Vulnerability Verified: 7 December, 2017 10:58 GMT
Website Operator Notified: 7 December, 2017 10:58 GMT
Vulnerability Published: 7 December, 2017 10:58 GMT[without any technical details]
Public Disclosure: 7 March, 2018 10:56 GMT