sixt.no Cross Site Scripting vulnerability OBB-1335153

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

sixt.no XSS vulnerability

Vulnerable URL: https://www.sixt.no/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%2520informieren!=javascript:alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...