haaretz.com XSS vulnerability

Open Bug Bounty ID: OBB-627819 Description| Value ---|--- Affected Website:| haaretz.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

haaretz.com XSS vulnerability

Vulnerable URL: http://www.haaretz.com/misc/search-results?startDate=%3C/title%3E%3C/script/%27-alert%280%29-%27%22-%22--%3E%3Cimg/onerror=%22;alert%28/OPENBUGBOUNTY/%29;%22src=1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...

Unfixed XSS vulnerability at www.haaretz.com

Security researcher TreX, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.haaretz.com, which at the time of submission ranked 8645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currently...