urbannestrealty.com.au XSS vulnerability

urbannestrealty.com.au XSS vulnerability Open Bug Bounty ID: OBB-609853 Affected Website: urbannestrealty.com.au Custom Code Vulnerability Type: XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score: 6.1 Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines Vulnerable URL: https://www.urbannestrealty.com.au/patch/patch.php?fd=%22%3E%3Cimg%20src=a%20onerror=prompt(3);%3E&file;=open-homes.php Coordinated Disclosure Timeline: Vulnerability Reported: 28 April, 2018 19:05 GMT Vulnerability Verified: 28 April, 2018 19:19 GMT Website Operator Notified: 28 April, 2018 19:19 GMT Vulnerability Fixed: 5 June, 2018 15:33 GMT Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore