modcloth.secure.force.com Cross Site Scripting vulnerability OBB-1491910

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

modcloth.com XSS vulnerability

On the 05.01.2018 security researcher reported a XSS vulnerability affecting the modcloth.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 5 January, 2018 23:3...

modcloth.com XSS vulnerability

Open Bug Bounty ID: OBB-452372 Description| Value ---|--- Affected Website:| modcloth.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

modcloth.com XSS vulnerability

Vulnerable URL: http://www.modcloth.com/shop/bottoms?sort=ratingalert'XSSPOSED'...

modcloth.com XSS vulnerability

Vulnerable URL: http://www.modcloth.com/shop/accessories?designer=...

modcloth.com XSS vulnerability

Vulnerable URL: http://www.modcloth.com/shop/bottoms?sort=ratingalert'XSSPOSED'...