sbb-shop.ch XSS vulnerability

Open Bug Bounty ID: OBB-382523 Description| Value ---|--- Affected Website:| sbb-shop.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sbb-shop.ch XSS vulnerability

Vulnerable URL: https://www.sbb-shop.ch/pub/index.php?page=goods-detail=131=2%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=confirm%27OPENBUGBOUNTY%27%20//%3E%3CSvg%3E==it=en Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:55...