krialenergo.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137734 Security Researcher 1orzero Helped patch 100 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting krialenergo.ru website and its users. Following...

krialenergo.ru XSS vulnerability

Vulnerable URL: http://www.krialenergo.ru/catalog/elektrostancii/gazovye/?pricefrom=0to=3534754from=3to="'--; Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...