nexusmods.com XSS vulnerability

2015-07-22T08:31:00
ID OBB:74974
Type openbugbounty
Reporter dim0k
Modified 2017-04-18T19:09:00

Description

Vulnerable URL:
http://www.nexusmods.com/skyrim/mods/37994/?navtag=http://www.nexusmods.com/skyrim/ajax/comments/?mod_id=37994&page;=2&sort;=DESC&pid;=0&thread;_id=1036356&pUp;=1&tab;=4);alert(/XSSposed/)//
Details:

Description| Value
---|---
Patched:| Yes, at 18.04.2017
Latest check for patch:| 18.04.2017 05:51 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 1450
Google Pagerank| 4
VIP website status:| Yes
Check nexusmods.com SSL connection:| (Grade: A)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 22 July, 2015 08:31 GMT
Vulnerability existence verified and confirmed| 22 July, 2015 08:33 GMT
Vulnerability patched by the website owner| 18 April, 2017 19:09 GMT