ipower.com Cross Site Scripting vulnerability OBB-2135715

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ipower.com ---|--- Open Bug Bounty...

ipower.com XSS vulnerability

Vulnerable URL: https://www.ipower.com/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...