login.fitnyc.edu Cross Site Scripting vulnerability OBB-2277937

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sites.fitnyc.edu XSS vulnerability

Vulnerable URL: https://sites.fitnyc.edu/depts/Hue/Spring2014/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.08.2017 Vulnerability type:| XSS Vulnerability...