startribune.com XSS vulnerability

Open Bug Bounty ID: OBB-418454 Description| Value ---|--- Affected Website:| startribune.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

cal.startribune.com XSS vulnerability

Vulnerable URL: http://cal.startribune.com/dynamic/calendars/findevent.php?d=datesearchdate=03/28/2017field=order==50=25 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

apps.startribune.com XSS vulnerability

Vulnerable URL: http://apps.startribune.com/ipad/alerts/unsubscribe.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 29.11.2017 Latest check for patch:| 29.11.2017 19:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...