eyesite.nhs.uk XSS vulnerability

2018-01-26T18:18:00
ID OBB:547545
Type openbugbounty
Reporter dak
Modified 2018-01-26T18:18:00

Description

Open Bug Bounty ID: OBB-547545

Description| Value
---|---
Affected Website:| eyesite.nhs.uk
Vulnerable Application:| [hidden until disclosure]
Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:| [hidden until disclosure]
Disclosure Standard:| Coordinated Disclosure based on ISO 29147 guidelines
Remediation Guide:| OWASP XSS Prevention Cheat Sheet

Coordinated Disclosure Timeline

Description| Value
---|---
Vulnerability Reported:| 26 January, 2018 18:18 GMT
Vulnerability Verified:| 26 January, 2018 18:30 GMT
Website Operator Notified:| 26 January, 2018 18:30 GMT
Vulnerability Published:| 26 January, 2018 18:30 GMT[without any technical details]
Public Disclosure:| Sheduled on 26 April, 2018 18:18 GMT