logo
DATABASE RESOURCES PRICING ABOUT US

chennai.taiwantrade.com Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-931525 Security Researcher **Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations **, a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting **[chennai.taiwantrade.com](<https://chennai.taiwantrade.com>)** website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[chennai.taiwantrade.com](<https://chennai.taiwantrade.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABLCAIAAAAphcDFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAaTElEQVR4nO2df0wb5/nAHeKCMcYhxDgEHGJo5FIrTWmUIbrRCpEqQwght00T5rGEsiilEaMI0QxQljGCKKOkarMpiiJWUS3qoqqKEEKIVqxCHkMZIZbjecx1KTPU8TziEENd5hDCff941fd7u3vv9fkXIeH5/OX37rn3fd7nee8e33v3PreJYRgJAAAAAMSAuIetAAAAAPDYAjEGAAAAiBUQYwAAAIBYATEGAAAAiBUQYwAAAIBYATEGAAAAiBXrN8ZkZ2ffvHlTqAhsHNbe9TDY1i3gmkeOdRpj/v73v6+urj777LPEIrBxWHvXw2Bbt4BrHkWCxJiZmZnk5GTiroWFhXfeeUeoGCH9/f3l5eVCRfFKxhShdsWYIqY6R+6LmZmZrVu3RkufSKC7XiQhWTsqLYaESPXCHjN37959/fXX09LSMjMzf/nLX96/fz+MSiIBax7huMKu+fbbb996661du3YlJiY+9dRTv/3tbx88eIDFPvroo6effjoxMfHpp5/+3e9+x1ZjE4udO3c2Nzcja3Bsy5bcvHlzdnb22bNnURObSITdow0BQ8XpdCoUCjG7KJJhkJ+f//nnnwsVxSsZawKBAH+jSH2Ix0aFyA3idDpTUlKipU8k0F0vHvHWjlaL4hHvr/DGTHl5udFodLlcdru9sLCwqakpjEoiAXcwwnGFXXPo0CGDwWC32+fm5oaHh4uKisbHx5HMpUuXNBrNwMCA1+sdGRnZvXt3W1sbW41AIBAIBJaWlqxWa0FBwenTpxmBqxmWtFgs+fn5qB600W63p6SkBL4n7B5tBNZjjHG73SkpKcvLy8RiSEo+FB66Po9NjAnq+segRSbGA2ZpaUmj0fj9flQcHx/fvXt3jNoSwuVy7du3D/3Iz88PrxLsmqWlJalU6vP5iGIajYb9F8FsNsvlctR9vp1HR0dzc3P5u4iSer2eLbAeTpBHAlHPYz744IPs7Oxt27b97Gc/W1hYkEgkCwsLWq3W7/dv2rTpo48+Yhffe++95OTkd999d/v27Vu3bj127Nh///tfVM/169dfeOGF5OTkzMzMV1999Z///Cexuf7+/oMHDz7xxBP84oMHD5qbm7dv356UlPTaa6/duXOHoqREIrl3797Pf/7z5OTkXbt2/frXv0Z3u+i++Ny5c9nZ2Vu3bv3pT3+K5IW2I82ff/75xMTEtLS011577datWxKBuQuOZYIe+/LLL7/77rvo2Js3byYkJOBG33jjjbfffptYA0VVjgJI8p133klLS9uxY8cf/vAHIZVu3br14x//ODk5+amnnvr4449xj4g25ED0y3fffffGG2+kpaXt3LnzN7/5Dd/4SUlJR44cuXPnzttvv52WlrZt27bXX3/9u+++448E8UfRrU2xG3+wEYerkDUo7XKMLzSGiQOYDXu88XVDe/nnXWJi4jfffJOUlIQOnJqaysjIEBIOqSNESSKZmZk3btxAP/72t7+hjZ999pmQPFEAu2Z1dVUikUilUv4hCwsLLperqKgIb3nuuedGRkaEmpDJZIFAgK4GllxZWRGvLYAJHmP8fr/FYhkbGxsfH3e73U1NTRKJZMuWLXa7Hd1OVlZWsosvv/yy3+8fHx+fmJiYmJgwm81dXV2oqrKysqqqqtnZ2dHR0cLCQplMRmyR8jCmq6treHh4eHjY4XBkZGRMTk5SlJRIJG1tbeimeGhoyGQyXbx4EctbrVYkPzs729LSQt9uNptPnDjh8XhsNptGo6mtrRUyF8cyQY8tKysbHh5GvwcGBlZXV4eGhlBxeHi4tLRUqAYhVfkK+P1+u91us9l6e3sLCwuFKqytrVUqlZOTk4ODg+wYI2RDNkS/1NXVud1us9k8NDTU399/4cIFtrNGR0ctFovb7c7NzfV6vVar9dq1a06nE3eE43qRRwX1lJDd+C0Sh6uQNYTa5RufaCuhASwEUTeh8w7z5ZdfNjY2dnd3U4TFd0RIMo0HsQtVVVUHDhxAsYfD9evXDxw4UFVVRXRNUlJSaWlpRUXFX//6V/Y/EqSkTCbDf08RP/jBD3CIZbOwsNDa2opOMTq3b98+ffq0wWCgyFC6s9Gh3+Y4nU6JRLK4uIiKY2NjOTk5eBfx7hIdMjs7i7ZfvXp1//79DMPMz89LpVLi3OXs7KxWq0W//X6/QqGYn58nFtVqtdlsFq+kSqXCswRoUpUvPzo6iuSFtnOYmppKT0/nW4BvCjHHut1uuVyOzJKfn9/Q0GA0GpGAUqnkT9qgGuiqshVAktiAQiqtrKzIZDK21/BUANGGHPh+WVlZUSgU09PTqNjf319QUID1wRMdo6OjcXFxS0tLqDg2NoZnctiuF38Uv2sMb3AK2Y3dotBwFWMNdrt84/NtRRnAHDHUC6JuQucdxuVy5eTkXLlyRYywmI4QJVFDHIiH+P3+jo6O1NTUw4cPOxwOtNHhcBw+fDg1NbWjowPbmeFdBxYXF5uamnQ6nVQq3b17d2tr68rKChNs1hH1QvU98fHxRqOROI3GlkxNTZXJZDU1NWyD8+fKiN0BmFCfx7AtS4kxMpkMb5+cnFSr1eh3RUVFXl5eQ0NDd3f3yMgIlllZWXG73ej31atXi4uL8S520efzSaVSNJjEKDk/P88eUqmpqUgTIXlKZ81m80svvZSRkYHqIcoL6RP02Ly8vC+++MLj8Wg0Gp/Pp1arV1ZWenp6XnnlFaEaKKoyvBjDV5Jfodvt5niNbkM2RL+43e74+HhcdDgcxMDM1xwX2a4XfxTd2vR6OGOPP1wp1hA5Qoi2omtFFOPrRjnvEAUFBefPn8dVCQmLH+pEyVCZn583GAxSqRQVpVKpwWDgP2vhuAYTCATGxsbwo3uXy8XuFwen0ymXy1HY6+3tTU9Px39T+C7Akm63m3jNIfaX0x0VC7odHmPWdH3Mn/70p56enr179y4vLzc0NPziF79A2zdv3rxjxw70O+hby5s3bxbZXCAQiIuLm5iYsFgsFovFarVaLJbwNDcYDC+++KLJZLJYLIODg9E9trS0dHh4eGBgoKysbMuWLXl5eSaTCU+URdh6hN0Rb0PxfhFJeO8QR2IrTov84UqxRkjtRm4roVNJiH//+99WqzWomCSUjghJipwrk0gkX3/9dW1trclkamtrQ1va2tpMJtPJkye//vprtqTQYEhISHj++efPnz//ySefSCQSNEXMeTn7xo0beEotLi4uMzMzMzPz2LFjKpWqp6dHSDcsuWPHDpH+4nfHwkJMDY8n9BAU3n2MhHUb3tfXR7wNt1gsGo2Gs3FlZUWlUuEJFk6RYRi1Wm2xWMQrqVAoiHNrId3HzM3N4T8mSHPx9zFijh0bG8vPzy8vLx8cHGQY5sKFC3V1denp6ejejlhDJPcxxAo5c2V9fX10G3Lg+4UyVybmjoTjepFHBbU2pR7+YGODhyvRGiGNEL6twriP4etGP+9WVlbYXRMSFt8RIUlG9FxZTU2NQqFoaGjwer3s7V6vt76+XqFQ1NTUYOU5rmFPozEMYzKZ8OyiRqMZHh7Gu2w2m9B7ZVeuXNFoNGgGLNS3ZPk+EuoOEH6M8fv9UqkUzzziIhq+hw4dcrlcNpstLy+vtbWVYZjJycmSkpIvvvjC6/XOzs4eP368rKwM14w8bTKZ9uzZgzdyigzDdHR05OfnW61Wl8uF/jLQlaypqSkoKLDZbG63u6urC73hHsZcmVqtvnDhgs/nczgcBoOBL8+eq+VYJuixSEatVqNKXC6XUqnMy8tj7+XUQL8qsRUQuszxVTIYDGyv0W3I6TLRL8ePHy8vL5+dnbXZbPv27UMTNSKjBcf14ufK6Nam1MNpUWi4CllDjJeFbEXRivMMAIkRdRM67zCcqoSExXeEKCmeyspKp9MptNfpdFZWVqLfHNfY7Xa1Wn3p0iW32+3z+dDejo4OtJe9PsZkMun1+vb2do4BMXq9/uLFi/xdYcQYenc2MuHHGIZhWltb5XJ5b28vu3ju3DmFQtHZ2alWq1NSUo4ePYomPZeXl1tbW3U6XXx8vFqtrqys9Hg8nFYaGxtbWlpw/ZwiwzArKyunTp1SqVQymcxgMKC/DPRTtL6+XqPRyOXy0tJS9FcojBhjMpn2798vk8nS09MbGhroVy6OZejHIoxG46FDh3Bx//797I7zawj6zxcrQDxbiCq5XK6DBw8qFAqdTtfd3R2SDYl+8fv9J06cUKlUGo1G6KmsULTguF58jAnJU+wDOS0KDVeiNYK2y4ZvK/EDEhWJuqG9/PNOyGJCwuI7QpSMBfzrwODgYFFRkVKplMvle/fuvXTpEntvb29vbm6uTCbT6XT4ERSxF5cvX9ZqtcvLy5HHGECIIDEmDIK6h4JOp7t27ZpQEdg4rL3r1/9go59ZIZ13kZyka8/6dw1AgbCO6SHy5ZdfUorAxmHtXQ+Dbd0CrnmkWad5lx9jbt68+eabbz5sLQBRrB9n3b9/f2xsTKPRPGxFHhnu37//k5/85D//+Q+xGBT4iEC0gBiz1lRVVWm12oetBSCK9eOsEydO1NbWdnR0PGxFHhmeeOKJ+Pj4xsZGYpEOfEQgmoQxvxb2ZO7i4mJdXV1WVhZ6HNfZ2cle3ISf1OXm5nKe1LEV1mg0TU1NeAE85z1dLBYXF6fVatva2lATkfc97F77fD780ovX642Li8Nv+FAMwj4qisrwqa+vl8lk+MWNqEN0a7T0FxozYgj62JbtLM4glEgkODNFIBCoqKigd4cv4/V6KysrVSpVRkYGezxjSkpK0CtPQnAEpqeny8vLU1JS1Gr18ePH+csY+V0oKSlhGMZut5eUlCiVSrVaXV1dLZRrUqibQtsXFxfT09PtdjuxNqK2QW0ipptss5jNZpx9gF+k0N7eXltby1DP0EjG3oZiTWNM1DNyM7wYo4hZRu6we01ZrUIxSNDmopJRHF1GLRYLfyVzVBBya1RiDGXMiCFojBEaWoFAoL29vby8nGGYQCBQVFR06NAhSneIMqWlpTjfPns8I9DruewXwzjwBfR6/alTpzwez/T0tMFgQBmJ+N0JsEAX8ZycnOPHj7vdbpfLZTQaKyoqRHaB3v329vbGxkYh/Yna0m0ippscs4T6thgm6EcEIhx7G4q1izGxyMjNUK/gTFQzckc9xtANsjZv/sS6FSG3RqVdypgRQ0gxxuPxoH/9CL1ef/XqVSTT3t4e9I0vjozf74+Li2OnX9PpdOxDTp48SbzCCgnwV0TyFzgTlQwEAu+//z5OlWa1WvkHUroptH1xcXHPnj24Wg5EbYPaREw3OWYJL8aI+YhAhGNvQxGFGDM0NESXRwJoYSDRDT6fTyKRcG6Nx8fHhWLMxMQEnqmgx5iJiQn2SOVfVojKj4+PFxQUyGQylUqF1qnxKw8EAtXV1QqFIisr68yZM+zFHx0dHSqVKj09vaenB3UNwVmtEtQgCLTeiF0nWxn0o7u7W6vVpqSkGI1GfEq43e7S0lKFQqHVatnrXTBer5evG6ch/hoXdotyufzw4cNer7exsRElraqqqsI9orgVVfL+++9rtdrU1NTKykqsNsX4fMMKjRni0hzmf9cAdXR0sNcACXmTODxUKhW7aTEXL8pA5QxLn8+XmpqKV4/xIQro9frf//73DMMsLS3V1NTwb0ecTqdcLq+rq0MLfuvr6zk3r8vLy6dOnTp69KiYLtC3d3R00Gdf+doGXfIVtJt8s4iMMZyLwMWLFw8fPswIn6H0sQdwiEKMSU9PLy4unpiY4EuOj48XFxfjOdDy8vKysrLR0VGOM4JmsmM35/P5ysrKTp48yd/LkZybmyspKTl16hS7Ks7AJSp/8eLFDz/80OfzeTye+vp6g8HAr7ylpaWiomJ6enpycrKoqAiNezTlffToUY/HMzQ0hCajcaZ9fIHGlQgZhH3U9PQ0v052jEF73W63w+EoLCzElnnllVcMBoPH45mamtq7dy/xjOXoxm+ourq6rKyMvVYfiVVWVrpcLtSiSqWqqqpCChQVFdXV1QV1K6oEHTU1NVVcXIwThwgZn6Mbfczw1UbbUS6D2dnZqampPXv2YJsIeZN4STp58iTuI+5OFGNMd3c35UIvJDA9Pa1UKmUymVQqzc3N5Y8oZMOWlpa5uTnU/e7ubrz36tWrUqm0qKiIMgcrMsb4/X6VSpWTk5ORkdHS0kKchuVrKzLGULrJN0vQGMO5QCFKS0svX76MfhPPUPrYAzhEIcaIz9Ed9YzcDO/UlUQ7I7dQJn/KVwM4KdApFxchgzC8KCJUp1MgWT3KP4ZXobNz9VN04zREzDnmFJ1mn+JWp7hs9pTc8pTKhVKlhfr9AqHJpZSUFH5y/ijGmJycHIvFQpnKIwrU1dXt27dvfHz8888/12g06DaUozl7JWNfXx/7wwRLS0soKQvlRQORMaa7uxvlL0CRjPg8nK+tyBhD6SbfLJQYE8lHBNZmHvuxIXiM4aenJppYZI5uRLQycjO8UzcqGbmDpjcX+dUAoobE0ckxCPO/UYRSp9CZyUmtj3P1h6QbMT8//VrALtLvY4QqEZlbnlK50GcFQv1+AdHyV65c2bt3L707QbtM6T5OYi80VokCy8vLcrncarWi4scff0xMRMvGbrfzX7IaHBxEH0UO2gXKdp1OhwN5f38/XxOitmJiDKWbRLNQYkwkHxGA+5iQCL4+Rkx6avE5uhHrPCN30PTmUfxqAIJjkMeDoG4lIjK3fHiVEwnJm729vdXV1aE2IZ7z58/X19eHKjA/P7+8vPzMM8+gYl5ensvlCtrW6urq/fv3r1+/jrfk5OS43e7Qtf5/7t69Oz09vXPnTlTU6XT8CsPTln5gULtxiOQjAlEcexuB4DEmkwXasmvXrm+//RYLvPnmm3l5eenp6Q6Ho7m5GW1sbm52OBxqtTovLw+vlOb4AD0GkEgkW7Zs0Wg0JpMJ7/rHP/7x4osvEvU5ffp0V1fXvXv3QuilMHzlb9++7Xa7f/WrXz355JOZmZnED0Lv2LFDLpfPz89jy+Dv34SEkEEiR61Wx8XFzczMoKLdbg+vkvj4+H/961+4kpAWJIbkVoQY4wetXEhttVotkUi++eYbtN3hcKAf4r1569atkZERo9EYvPNUVCrV0tLSwsICKrpcLqSbRCIZGRmpqqpKS0vbt2/f4uIi//srRIHt27dLpVJ8uSR66s9//vNzzz2Hi5OTk1qtdnV19Yc//OHdu3fRRofDkZWVFUnX5HL56uoq2/j8ConaUmxCPxD9Dmo3DsQL1IMHDwYGBtgxhniGhjGwNzTh3f6wH3KIzNEdi4zcjLiZKLYyYjJyE5OWLy4uSqVSu92OpuDEfDUAwc60Pzs7i++y6QZhfyshjLky5vtX+51Op81mYz/zJ6aLF1Ken59f/FwZI+xWSiXic8tTxgzxswJMiN8vYDsL0dnZid5BEHIHBY5MSUlJZWUlflMDz5Hib65cu3ZNqVTyv78iJFBbW1tcXDw9PW02m3U6Hf+1Lp/Pp1Kpzpw54/V6zWYzflJSVlZWUVHhcrksFoter79w4YLILghtNxgMJSUlTqfTarXq9foPP/yQfwhRWyGbBD1QyCxTU1Ps0cgpYuXD+IgAZewBHNZ0DWbUM3IzEccYIkJJy5uamnDGfjEZ7zE4034gEJDJZPjlArpB2N9K4HckaIzxeDxlZWXo3eXOzk56ungh5YXeXRYyKd/CRLdSKhGfW16ocqLaaHtI3y/gOIthmNzc3L6+Pr4aQd9f4m+cm5szGo2pqalCa9opzxX4Akjb2tpatVqdlZWFXxjjHDgxMVFYWKhQKHJycrq6urAmFRUVKSkpGo2G8sdOaCN/u9frRV3Lysrq7OwkyhC1JdpEzIFCZvn000/ZD884RT4hfURAaOwBHKKf2x+gU1dXR3yoGFPQP7I1bvQxIDxnRf29o7ArXPsD148mgUBAq9XiF884RSLwEYFYsL5y+28Euru71/7j3haLJScnZ40bfQwI21lRz6QZdoVrf2DUKwzvwISEhMuXL//oRz8iFonARwRiwSZGIF8k8Khz9uzZjIyM8vLy6elpo9F45syZY8eOPWylNgR37tzx+XxPPvnkQ69w7Q9c/5oAawzEmMeWv/zlL/X19TabLSsrq7a29q233nrYGgEAsOEI/u7yzMzMJhY7d+5sbm5G74bPzMwkJyfzxTZv3pydnX327NkHDx6gvZtIxK5XgEQieeGFF27cuHHv3r2vvvoKAgwAAA8FUd8oU7AS5g8ODo6MjODlikQxv9/f19c3MDCAP6lETK0fzX4AAAAA6w+x38FMSEhISEhITEx85plnuru7P/30U7rYs88++9577125coW9HS2pS/ieqHQAAAAAWLeE861lmUwm5i5EJpPRV61/9tlnYbQOAAAAPCqEHGMWFhZaW1tLS0vpYrdv3z59+rTBYKDIVFVVHThw4MaNG6HqAAAAADwSiIoxfr8/7XvUarVSqezq6qKIbdu2LSsrS6vVEh/bYKampl566aWDBw8eOXLkq6++CrMHAAAAwHpF1BpMuVyOVqINDw83NTX19PQkJiZSxOLi4tRqddC0x0lJSc3NzTU1NdXV1Xq9npPHFAAAAHjUEXUfIzK1flTy6gMAAACPDSE/j4lian3iRwEAAACAx4aQY8yRI0eUSmVvb2/kbfv9fpvNdu7cuW3btkVeGwAAALDeCOfd5ZaWls7Ozsgfn/zxj3/ctWtXhJUAAAAA6xbIVwYAAADEinDuYwAAAABADBBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFgBMQYAAACIFRBjAAAAgFjxf9vNse+oEAatAAAAAElFTkSuQmCC) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://931525.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 11 August, 2019 10:08 GMT ---|--- Vulnerability Verified:| 12 August, 2019 10:45 GMT Website Operator Notified:| 12 August, 2019 10:45 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 12 August, 2019 10:45 GMT Vulnerability Fixed:| 28 August, 2019 17:41 GMT ---|--- Public Disclosure: ![](/images/design/information-icon.png)A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability.| 10 September, 2019 10:08 GMT ---|---