CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

Cross site scripting

XSS exists in Domain Trader 2.5.3 via the recoverlogin.php emailaddress parameter...

CVE-2018-10097

CVE-2018-10097 describes a cross-site scripting vulnerability in Domain Trader version 2.5.3, exploitable via the recoverlogin.php email_address parameter. The issue is a client-side/script injection flaw in that input parameter, enabling arbitrary script/HTML to be injected when processed by the...

rollingdomains.com XSS vulnerability

Open Bug Bounty ID: OBB-569478 Description| Value ---|--- Affected Website:| rollingdomains.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Domaintrader Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...