ndr.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1098678 Security Researcher raviakp1004 Helped patch 715 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting ndr.de website and its...

ndr.de XSS vulnerability

Vulnerable URL: http://www.ndr.de/sport/ergebnisse/index.html?menue="=maennerfussball1buli20152016= Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4979...