loc.gov Cross Site Scripting vulnerability OBB-2708257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

loc.gov Cross Site Scripting vulnerability

Security Researcher 5ub50l0 Helped patch 649 vulnerabilities Received 4 Coordinated Disclosure badges , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting loc.gov website and its users. Following coordinated and responsible vulnerability...

loc.gov Improper Access Control vulnerability

Open Bug Bounty ID: OBB-700401 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden unti...

loc.gov XSS vulnerability

Open Bug Bounty ID: OBB-625996 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

loc.gov XSS vulnerability

Open Bug Bounty ID: OBB-592517 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

loc.gov XSS vulnerability

Vulnerable URL: https://www.loc.gov/marc/organizations/org-search.php// Details: Description| Value ---|--- Patched:| Yes, at 04.01.2018 Latest check for patch:| 04.01.2018 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5244 VIP website status:| Yes...

loc.gov XSS vulnerability

Vulnerable URL: https://www.loc.gov/marc/organizations/org-search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5199 VIP website status:| Yes Coordinated Disclosure Timeline:...

loc.gov XSS vulnerability

Open Bug Bounty ID: OBB-214196 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

loc.gov XSS vulnerability

Vulnerable URL: https://www.loc.gov/marc/organizations/org-search.php// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4627 VIP website status:| Yes Coordinated Disclosure Timeline...