tesco.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-952280 Security Researcher SUNDARRINSA Helped patch 14 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting tesco.pl website and its users. Following coordinated...

tesco.pl XSS vulnerability

Vulnerable URL: https://www.tesco.pl/sklepy/1/supermarkety/?only-open=666%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2fscript%[email protected]= Details: Description| Value ---|--- Patched:| Yes, at 24.04.2017 Latest check for patch:| 24.04.2017 13:25 GMT Vulnerabili...