chatham.edu XSS vulnerability

On the 18.11.2017 security researcher reported a XSS vulnerability affecting the chatham.edu website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 November, 2017 07:...

chatham.edu XSS vulnerability

Open Bug Bounty ID: OBB-369560 Description| Value ---|--- Affected Website:| chatham.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

chatham.edu XSS vulnerability

Vulnerable URL: https://www.chatham.edu/womensstudies/x%22%3E%3CsvG%20onLoad=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 167859 VIP website status:| No Check chatham.edu SSL...

chatham.edu XSS vulnerability

Vulnerable URL: http://www.chatham.edu/reunion/forms/lost/index.cfm?LastName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...