finanzas.com Cross Site Scripting vulnerability OBB-2132675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

finanzas.com XSS vulnerability

Vulnerable URL: http://www.finanzas.com/buscador.html?q=1%22%27--!%3E%3CHtml%20OnMouseEnter=%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340;/OPENBUGBOUNTY/%26%2341%20%3C!--//%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 05.11.2017...

finanzas.com XSS vulnerability

Open Bug Bounty ID: OBB-68609 Description| Value ---|--- Affected Website:| finanzas.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...