baumit.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147764 Security Researcher Hchabik Helped patch 2433 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting baumit.de website and its...

baumit.de XSS vulnerability

Vulnerable URL: http://www.baumit.de/suchergebnisse.html?searchterm=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...