e-podroznik.pl Cross Site Scripting vulnerability OBB-3720809

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

e-podroznik.pl XSS vulnerability

Open Bug Bounty ID: OBB-628805 Description| Value ---|--- Affected Website:| e-podroznik.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

e-podroznik.pl XSS vulnerability

Vulnerable URL: https://www.e-podroznik.pl/public/logIntoTicketP.do?tabToken=a8ab096fa400970015039faa5eece984noaia%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2fscript%3Exv2nq Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.12.2017 Vulnerability type:| XSS...