davinciasia.com Cross Site Scripting vulnerability OBB-1417136

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

davinciasia.com XSS vulnerability

Vulnerable URL: http://www.davinciasia.com/product.php?brand=Mario-Cioni-Italy%22--!%3E%3CSvg/OnLoad=alertOPENBUGBOUNTY%3E%22&=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...