changedetection.io has Reflected XSS in its RSS Tag Error Response

A reflected cross-site scripting XSS vulnerability was identified in the /rss/tag/ endpoint of changedetection.io. The taguuid path parameter is reflected directly in the HTTP response body without HTML escaping. Since Flask returns text/html by default for plain string responses, the browser...

radiovesti.ru XSS vulnerability

Vulnerable URL: http://radiovesti.ru//%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18196 VIP website status:| Yes Check...