logo
DATABASE RESOURCES PRICING ABOUT US

buildings.westsussex.gov.uk Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-860622 Security Researcher **Gh05tPT Helped patch 6873 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations **, a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting **[buildings.westsussex.gov.uk](<http://buildings.westsussex.gov.uk>)** website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[buildings.westsussex.gov.uk](<http://buildings.westsussex.gov.uk>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Gh05tPT Helped patch 6873 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- **Screenshot:** ![buildings.westsussex.gov.uk vulnerability](/twimages/screen-860622.jpg) **Mirror:** [Click here to view the mirror](<http://860622.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 17 June, 2019 11:07 GMT ---|--- Vulnerability Verified:| 17 June, 2019 11:23 GMT Website Operator Notified:| 17 June, 2019 11:23 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 17 June, 2019 11:23 GMT Public Disclosure: ![](/images/design/information-icon.png)A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability.| 15 September, 2019 11:07 GMT ---|---