confluence.org Cross Site Scripting vulnerability OBB-2521200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

confluence.org XSS vulnerability

Vulnerable URL: http://confluence.org/visitor.php?charsetcheck=%C3%A1=searchname=%22%2F%3E%3Csvg+onload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3Ename= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

confluence.org XSS vulnerability

Vulnerable URL: http://confluence.org/visitor.php?action=searchname=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Ename= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Unfixed XSS vulnerability at www.confluence.org

Security researcher nanoymaster, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting www.confluence.org, which at the time of submission ranked 175082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...