itacjira.nhlbi.nih.gov XSS vulnerability

itacjira.nhlbi.nih.gov XSS vulnerability. Open Bug Bounty ID: OBB-631980. Affected Website: itacjira.nhlbi.nih.gov. Vulnerable Application: Custom Code. Vulnerability Type: XSS (Cross Site Scripting). Vulnerable URL: https://itacjira.nhlbi.nih.gov/plugins/servlet/oauth/users/icon-uri?consumerUri=https://diogoreal.com/pentest/jira.html. Coordinated Disclosure Timeline: Reported 14 June, 2018 12:25 GMT. Verified 14 June, 2018 12:36 GMT. Website Operator Notified 14 June, 2018 12:36 GMT. Public Report Published without technical details 14 June, 2018 12:36 GMT. Public Disclosure 12 September, 2018 12:25 GMT