amherst.k12.wi.us Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1089080 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting amherst.k12.wi.us websit...

www3.amherst.edu XSS vulnerability

Vulnerable URL: http://www3.amherst.edu/scrutiny/classratings.php?classname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...