thelocal.de Cross Site Scripting vulnerability OBB-3891050

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thelocal.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-981778 Security Researcher zeeshan Helped patch 55 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting thelocal.de website and its...

thelocal.de XSS vulnerability

Vulnerable URL: https://www.thelocal.de/members/register/brexit Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25847 VIP website status:| Yes Coordinated Disclosure Timeline:...

thelocal.de XSS vulnerability

Vulnerable URL: https://www.thelocal.de/jobs/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

thelocal.de XSS vulnerability

Vulnerable URL: http://www.thelocal.de/jobs//%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25331 VIP website status:| Yes Check thelocal.de SSL connection:| Grade:...

thelocal.de XSS vulnerability

Vulnerable URL: http://www.thelocal.de/jobs/?jobkeyword=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E%22location=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:47...

thelocal.de XSS vulnerability

Vulnerable URL: http://www.thelocal.de/jobs/?jobkeyword=%22%3E%3Ciframe/onload=prompt%28%27XSSposed%27%29%3Elocation= Details: Description| Value ---|--- Patched:| Yes, at 06.04.2017 Latest check for patch:| 06.04.2017 09:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...