firstgroup-egypt.com Cross Site Scripting vulnerability OBB-2979986

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

firstgroup.com XSS vulnerability

Vulnerable URL: https://www.firstgroup.com/ukbus/cymru/journeyplanning/timetables/personalise.php?sourceid=2=152=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E=24id=24timetable1=1=1 Details: Description| Value ---|--- Patched:| Yes, at 31.08.2016 Latest check for patch:| 31.08.2016 20:03 GMT...