reservations.mahan.aero Cross Site Scripting vulnerability OBB-2120204

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

reservations.mahan.aero XSS vulnerability

Vulnerable URL: http://reservations.mahan.aero/ibe/public/showFlightSchedule.action?startDate=05%2F2014=THR=KSH=true〈=fa";alert'OPENBUGBOUNTY';=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:12 GMT Vulnerability type:| XSS Vulnerability...