csep.ca Cross Site Scripting vulnerability OBB-1275298

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

csep.ca XSS vulnerability

Vulnerable URL: http://csep.ca/admin/Index.asp?msg="You+have+been+automatically+logged+out+due+to+a+period+of+inactivity,+or+have+attemped+to+access+a+secure+page. Please+log-in+now. Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS...