jetradar-asia.com Cross Site Scripting vulnerability OBB-3472707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

search.jetradar.com XSS vulnerability

Open Bug Bounty ID: OBB-624529 Description| Value ---|--- Affected Website:| search.jetradar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jetradar.com XSS vulnerability

Vulnerable URL: https://www.jetradar.com/flights/?ref=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24058 VIP website status:| Yes...

Cheap flights — Jetradar - ContentProvider mode not defined, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Cheap flights — Jetradar published at the 'play' market has multiple vulnerabilities...