emails.macys.com Cross Site Scripting vulnerability OBB-3450721

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

www1.macys.com XSS vulnerability

Vulnerable URL: http://www1.macys.com/shop/search?keyword="; confirm%28%27XSSPOSED%27%29; //kws Details: Description| Value ---|--- Patched:| Yes, at 01.03.2016 Latest check for patch:| 01.03.2016 01:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...