collectionscanada.gc.ca Cross Site Scripting vulnerability OBB-3885276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

collectionscanada.gc.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-873989 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting collectionscanada.gc.ca websi...

collectionscanada.gc.ca XSS vulnerability

Vulnerable URL:...

collectionscanada.gc.ca XSS vulnerability

Vulnerable URL: http://collectionscanada.gc.ca/pamarchives/index.php?fuseaction=genitem.displayItem%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E〈=engnbr=3807925 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:59 GMT Vulnerability type:|...