m.johnlewis.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-360004 Description| Value ---|--- Affected Website:| m.johnlewis.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

johnlewis.com XSS vulnerability

Vulnerable URL: https://www.johnlewis.com/browse/electricals/televisions/all-tvs/4k-ultra-hd//N-6srfZ1z0heuk/"'--! Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

johnlewis.com XSS vulnerability

Vulnerable URL: https://www.johnlewis.com/brand/reg-ruby//N-1z13nhi/"'--! Details: Description| Value ---|--- Patched:| Yes, at 01.11.2017 Latest check for patch:| 01.11.2017 10:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4613 VIP website status:| Yes...

johnlewis.com XSS vulnerability

Vulnerable URL: https://www.johnlewis.com/browse/men/mens-polo-shirts-rugby-shirts/rugby-shirts//N-eaeZ1z0rhp0//%22%3E%3Cimg%20src=x%20%20onerror=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:07 GMT Vulnerabili...

johnlewis.com XSS vulnerability

Vulnerable URL: http://www.johnlewis.com/browse/men/mens-coats-jackets/denim-supply-ralph-lauren/windbreaker//N-ea9Z1z0owx4Z1z0rl37//%22%3E%3Csvg/onload=alert%28'OPENBUGBOUNTY'%29;%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:59 GMT...

johnlewis.com XSS vulnerability

Vulnerable URL: http://www.johnlewis.com/search?Ntt=x"%3Cbody%2fonpageshow%3D%28prompt%29%28%2fXSSPOSED%2f%29%3B%2f%2f=1&requestid=364364 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 07:40 GMT Vulnerability type:| XSS Vulnerability status:|...