OFBiz
  1. OFBiz
  2. OFBIZ-260

Cross Site Scripting Vulnerability (XSS)

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: Trunk
    • Fix Version/s: Trunk
    • Labels:
      None

      Description

      It's a copy of http://jira.undersunconsulting.com/browse/OFBIZ-559 from Olivier Lietz.

      ===========================================================

      Very simple test:

      /ecommerce/control/keywordsearch?SEARCH_STRING=<script>alert("XSS");</script>

      Other components beside ecommerce are also affected.

        Issue Links

          Activity

            People

            • Assignee:
              David E. Jones
              Reporter:
              Marco Risaliti
            • Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development