.wrapper { display:none; } .footer { display:none; } body { -ms-overflow-style: scrollbar; overflow-y: scroll; overscroll-behavior-y: none; } .errorContainer { background-color: #FFF; color: #0F1419; max-width: 600px; margin: 0 auto; padding: 10%; font-family: Helvetica, sans-serif; font-size: 16px; } .errorButton { margin: 3em 0; } .errorButton a { background: #1DA1F2; border-radius: 2.5em; color: white; padding: 1em 2em; text-decoration: none; } .errorButton a:hover, .errorButton a:focus { background: rgb(26, 145, 218); } .errorFooter { color: #657786; font-size: 80%; line-height: 1.5; padding: 1em 0; } .errorFooter a, .errorFooter a:visited { color: #657786; text-decoration: none; padding-right: 1em; } .errorFooter a:hover, .errorFooter a:active { text-decoration: underline; } #placeholder, #react-root { display: none !important; } body { background-color: #FFF !important; }

JavaScript is not available.

We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using openbugbounty.org.

2022 © OpenBugBounty

Open Bug Bounty selected among the
Top 5 Bug Bounty programs to watch
by The Hacker News

All Open Bug Bounty emails are sent only from openbugbounty.org domain being digitally signed. All others are fake. Learn more.

For Researchers

Report a Vulnerability Report and help remediate a vulnerability found on any website	Write a Blog Post Write a blog post to share your knowledge and get kudos
Browse Bug Bounty Programs Browse active bug bounty programs run by website owners	Ask a Question Ask questions and share your improvement ideas

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

For Owners

Start a Bug Bounty Start your bug bounty program at no cost and leverage crowd-security testing	Ask a Question Ask questions or let us know how to make Open Bug Bounty even better
API Request National CERTs and law enforcement agencies may request our API

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

Hall of Fame

Top Security Researchers They make Web a safer place by reporting and helping remediate vulnerabilities	Acknowledgements Website owners share their experience of collaboration with the researchers

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

About

About the Project Read about Open Bug Bounty history, values and mission	Latest Reports Browse the most recent vulnerability submissions
Contact Us Get in touch

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

Forum
Blog

OpenBugBounty.org > XSS Archive > Coordinated Disclosure Vulnerability

Coordinated Disclosure Vulnerability

This vulnerability was reported via our coordinated disclosure Open Bug Bounty program and patched.

Latest Patched

11.08.2022 educacao.pe.gov.br

11.08.2022 services.devon.gov.uk

11.08.2022 leicestershire.gov.uk

10.08.2022 bag.bund.de

10.08.2022 morroreuter.rs.gov.br

10.08.2022 coflein.gov.uk

10.08.2022 wowkorea.jp

09.08.2022 cxfmea-cil.nasa.gov

09.08.2022 opspinoff.gsfc.nasa.gov

09.08.2022 dex.mas.nasa.gov

Latest Blog Posts

08.07.2022 by 4websecurity
CVE 2022-29455 is still affecting millions of Wordpress sites

08.07.2022 by kh4sh3i_
Zabbix - SAML SSO Authentication Bypass

08.07.2022 by FR13ND0x7F
The Time Machine — Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

15.02.2022 by sepkatpro
Ultimate XSS Polyglot

11.11.2021 by mistry4592
The Most used Chrome Extensions are Used For Penetration Testing.

Recent Recommendations

5 August, 2022

luiztools:

Confirmo que Jonathan Fonseca (bypikeno) encontrou uma vulnerabilidade XSS em meu site, a qual está sendo providenciada a correção neste momento. Agradeço pelo aviso e disposição em ajudar.

31 July, 2022

ThomasDBending:

Thank you for finding an XSS vulnerability in my website.

31 July, 2022

ThomasDBending:

Thank you for finding an XSS vulnerability in my website.

26 July, 2022

MrMoney84315336:

Thank you to @Legacy_Defender for reporting and providing prompt and courteous details on our website, leading to a quick and pain free resolution. Keep up the good work.

26 July, 2022

MrMoney84315336:

Thanks for reporting the XSS problem on our websites.
We were able to fix the problem within 3 hours.
Great job - thank you

Making Web a Safer Place

Coordinated & Responsible Disclosure

Based on ISO 29147 Guidelines