logo
DATABASE RESOURCES PRICING ABOUT US

sa.theconstructionjob.com Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-971889 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[sa.theconstructionjob.com](<http://sa.theCONSTRUCTIONjob.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **0xrocky ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://971889.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 15 September, 2019 00:47 GMT ---|--- Vulnerability Verified:| 15 September, 2019 00:53 GMT Website Operator Notified:| 15 September, 2019 00:53 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 15 September, 2019 00:53 GMT Vulnerability Fixed:| 5 October, 2019 13:40 GMT ---|---