Unfixed XSS vulnerability at www.wisegeek.com

ID XSSED:68393
Type xssed
Reporter nullbyt3
Modified 2011-12-13T00:00:00


Security researcher nullbyt3, has submitted on 21/07/2010 a cross-site-scripting (XSS) vulnerability affecting www.wisegeek.com, which at the time of submission ranked 2263 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.wisegeek.com/s/?cx=partner-pub-8290526608142878%3A22o1omua7nj&cof=FORID%3A10&ie=ISO-8859-1&q=<script>alert('XSS')<%2Fscript>&sa=Search&siteurl=www.wisegeek.com%2Fwhat-is-bodybuilding.htm