croydon.gov.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1012682 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting croydon.gov.uk website and...

croydon.gov.uk XSS vulnerability

Open Bug Bounty ID: OBB-462814 Description| Value ---|--- Affected Website:| croydon.gov.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

croydon.gov.uk XSS vulnerability

Vulnerable URL: https://www.croydon.gov.uk/gsearch/%22%20%3E%3Csvg/onload=prompt'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 162639 VIP website status:| No...

croydon.gov.uk XSS vulnerability

Vulnerable URL: https://www.croydon.gov.uk/leisure/archives/archives/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 175857 VIP website status:| No Coordinated Disclosure Timeline:...

croydon.gov.uk XSS vulnerability

Vulnerable URL: https://www.croydon.gov.uk/gsearch/%22%20%3EKeritzy%3Cimg%20src=x%20onerror=prompt/xssposed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 169356 VIP website...