oopl.org.ng XSS vulnerability

Open Bug Bounty ID: OBB-627178 Description| Value ---|--- Affected Website:| oopl.org.ng Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

buildyourfinancialempire.com XSS vulnerability

Open Bug Bounty ID: OBB-626528 Description| Value ---|--- Affected Website:| buildyourfinancialempire.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

unisign.com XSS vulnerability

Open Bug Bounty ID: OBB-616259 Description| Value ---|--- Affected Website:| unisign.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

zipatec.de XSS vulnerability

Open Bug Bounty ID: OBB-608744 Description| Value ---|--- Affected Website:| zipatec.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fnac.es XSS vulnerability

Open Bug Bounty ID: OBB-608736 Description| Value ---|--- Affected Website:| fnac.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fnac.pt XSS vulnerability

Open Bug Bounty ID: OBB-608735 Description| Value ---|--- Affected Website:| fnac.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jcs.mil XSS vulnerability

Open Bug Bounty ID: OBB-560218 Description| Value ---|--- Affected Website:| jcs.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

newsroom.ing.com.au XSS vulnerability

Open Bug Bounty ID: OBB-559274 Description| Value ---|--- Affected Website:| newsroom.ing.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lng-safety.com XSS vulnerability

Open Bug Bounty ID: OBB-559273 Description| Value ---|--- Affected Website:| lng-safety.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

radiovertigo1.com XSS vulnerability

Open Bug Bounty ID: OBB-494233 Description| Value ---|--- Affected Website:| radiovertigo1.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-domain Flash Injection (XSF)

WordPress is vulnerable to cross-domain flash injection XSF attacks. The attack can be triggered via the code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file. The vulnerability is possible only when domain-based flashmediaelement.swf sandboxing is not used...

CVE-2016-9263

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection XSF attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file...

psafe.com XSS vulnerability

Vulnerable URL: http://www.psafe.com/blog/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

lindberg.com XSS vulnerability

Vulnerable URL: https://lindberg.com/assets/mejs/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 321924 VIP website status:...

kiesraad.nl XSS vulnerability

Vulnerable URL: https://www.kiesraad.nl/behaviour/shared-ro/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertopenbugbounty Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 617966 VIP website status:| No...

Zomato: XSS in flashmediaelement.swf (business-blog.zomato.com)

Hello Team Description:- business-blog.zomato.com is vulnerable to reflected XSS that stems from an insecure URL sanitization process performed in the file flashmediaelement.swf POC:- https://business-blog.zomato.com/wp-includes/js/mediaelement/flashmediaelement.swf?%jsinitfunctio%gn=alert%60xss ...

intercity.pl XSS vulnerability

Vulnerable URL: https://www.intercity.pl/js/flashmediaelement.swf?jsinitfunctio%gn=alertXSSPOSED Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12651 VIP website status:| Yes Check...

nethive.com XSS vulnerability

Vulnerable URL: https://www.nethive.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

tankionline.com XSS vulnerability

Vulnerable URL: http://tankionline.com/ru/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

perspektive-media.de XSS vulnerability

Vulnerable URL: http://www.perspektive-media.de/wp-content/themes/strikingr/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...