stock-world.de Cross Site Scripting vulnerability OBB-3823243

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

stock-world.de XSS vulnerability

Open Bug Bounty ID: OBB-446330 Description| Value ---|--- Affected Website:| stock-world.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

stock-world.de XSS vulnerability

Vulnerable URL: http://www.stock-world.de/user/config/mailregdata.m Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 468722 VIP website status:| No Coordinated Disclosure Timeline:...

stock-world.de XSS vulnerability

Vulnerable URL: http://www.stock-world.de/detail/suche/suche.m?url=%2Fdetail%2Fprofile.m=%22%2F%3E%27%3E%22%3Eu%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=Suche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS...