search.findmypast.co.uk XSS vulnerability

2015-06-21T19:04:00
ID OBB:67696
Type openbugbounty
Reporter mradamdavies
Modified 2017-11-14T00:01:00

Description

Vulnerable URL:
http://search.findmypast.co.uk/search/united-kingdom-records?firstname=derp "> ![](x) &firstname;_variants=true
Details:

Description| Value
---|---
Patched:| Yes, at 13.11.2017
Latest check for patch:| 13.11.2017 08:38 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 4
VIP website status:| No

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 21 June, 2015 19:04 GMT
Vulnerability existence verified and confirmed| 21 June, 2015 19:06 GMT
Vulnerability patched by the website owner| 14 November, 2017 00:01 GMT