elan.az XSS vulnerability

Open Bug Bounty ID: OBB-372643 Description| Value ---|--- Affected Website:| elan.az Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

elan.az XSS vulnerability

Vulnerable URL: http://elan.az/ru/search?s=%3Cimg%20src=x:alertalt%20onerror=evalsrc%20alt=OPENBUGBOUNTY%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72766 VIP website status:...