Lucene search

K
openbugbountyTbmOBB:74350
HistoryJul 20, 2015 - 11:02 a.m.

jcrew.com XSS vulnerability

2015-07-2011:02:00
tbm
www.openbugbounty.org
12
Vulnerable URL:
https://www.jcrew.com/ae/womens_category/shoes/espadrilles/PRDO">VR~C5447/C5447.jsp
Details:
Description Value
Patched: Yes, at 07.11.2016
Latest check for patch: 07.11.2016 04:56 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1611
Google Pagerank 6
VIP website status: Yes
Check jcrew.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 20 July, 2015 11:02 GMT
Vulnerability existence verified and confirmed 20 July, 2015 16:47 GMT
Vulnerability patched by the website owner 9 November, 2016 10:24 GMT