smava.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1067967 Security Researcher k0t Helped patch 2145 vulnerabilities Received 9 Coordinated Disclosure badges Received 97 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting smava.de website and its users...

smava.de XSS vulnerability

Vulnerable URL: https://www.smava.de/brokerage/kreditantrag.html?headervariant="// Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75569 VIP website status...