Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-260

Cross Site Scripting Vulnerability (XSS)

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • Trunk
    • Trunk
    • ecommerce
    • None
    • Bug Crush Event - 21/2/2015

    Description

      It's a copy of http://jira.undersunconsulting.com/browse/OFBIZ-559 from Olivier Lietz.

      ===========================================================

      Very simple test:

      /ecommerce/control/keywordsearch?SEARCH_STRING=<script>alert("XSS");</script>

      Other components beside ecommerce are also affected.

      Attachments

        Issue Links

          Activity

            People

              jonesde David E. Jones
              risalitm Marco Risaliti
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: