ec-lyon.fr Cross Site Scripting vulnerability OBB-3940327

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ec-lyon.fr XSS vulnerability

Vulnerable URL: http://www.ec-lyon.fr/en/email/node/2023/fieldemail/%3C!%27/!%22/!/%27//%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm1%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.12.2017 Vulnerability type:| XSS Vulnerability...

ec-lyon.fr XSS vulnerability

Vulnerable URL: http://www.ec-lyon.fr/en/search?key=eeeeee"%3E%3Cbody onload=prompt"OPENBUGBOUNTY"%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100073 VIP website status:| No...