slyelectronics.com XSS vulnerability

On the 26.12.2017 security researcher reported a XSS vulnerability affecting the slyelectronics.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 26 December,...

slyelectronics.com XSS vulnerability

Vulnerable URL: http://slyelectronics.com/productdetails.php?prodID=%27%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...