crystalballservices.com Cross Site Scripting vulnerability OBB-3851721

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

crystalballservices.com XSS vulnerability

Vulnerable URL: http://www.crystalballservices.com/Portals/0/CBMaterial/CrystalBallUserGuides/en/Crystal%20Ball%20Strategic%20Finance%20Wizard%20Help/frameset.htm?javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...