ashford.com Cross Site Scripting vulnerability OBB-3846612

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ashford.com XSS vulnerability

Open Bug Bounty ID: OBB-432026 Description| Value ---|--- Affected Website:| ashford.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

ashford.com XSS vulnerability

Vulnerable URL: http://www.ashford.com/us/watches/Victorinox-Swiss-Army/cat600067.cid?pn=brand" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5933 Google...

ashford.com XSS vulnerability

Vulnerable URL: http://www.ashford.com/us/home?locale=enUS=AF"=English=USD=organic Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5933 Google Pagerank| 4...