lalafo.tj XSS vulnerability

Open Bug Bounty ID: OBB-662940 Description| Value ---|--- Affected Website:| lalafo.tj Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lalafo.tj XSS vulnerability

Vulnerable URL: https://lalafo.tj/tajikistan?q=%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus/%0D/Onfocus=confirm%60OPENBUGBOUNTY%60%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

lalafo.tj Open Redirect vulnerability

Vulnerable URL: http://lalafo.tj/en/lang/en?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:09 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 179013 VIP website...