hope.edu Cross Site Scripting vulnerability

Security Researcher 1orzero Helped patch 94 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting hope.edu website and its users. Following coordinated and responsible vulnerability...

hope.edu XSS vulnerability

Open Bug Bounty ID: OBB-572023 Description| Value ---|--- Affected Website:| hope.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hope.edu XSS vulnerability

Vulnerable URL: http://www.hope.edu/resources/php/localist/Localist-handler.php?items=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E=true=event-list-append=2016-04-16=true=2016-12-31=2016-12-31=365=2 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:|...