lupe.at Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1138453 Security Researcher error404 Helped patch 528 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting lupe.at website and its...

lupe.at XSS vulnerability

Vulnerable URL: http://www.lupe.at/suche?q=%22%3E%27%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3Efind=Finden=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...