715042 - Xss Vulnerability on Https://www.Wiki.Mozilla.org

Status: RESOLVED DUPLICATE of bug 714540

(Websites :: wiki.mozilla.org, defect)

Description

[BelminVehabovic]

Hello this is Belmin Vehabovic

I found a Non-persistent Vulnerability on Wiki.Mozilla.org

https://wiki.mozilla.org/Special:Search?search=<script>alert("Xss By Belmin Vehabovic");</script>&x=18&y=9

Comment 1

[Mark Goodwin [:mgoodwin]]

Thank you for reporting this issue to us. We'll investigate the issue and 
provide feedback within the bug. No additional action is needed from you 
at this time. If you have questions or additional information please add 
that info to the bug.

Thanks,
mgoodwin

Comment 2

[Mark Goodwin [:mgoodwin]]

Issue:
Reflected XSS in wiki.mozilla.org via search.

Steps to reproduce:
Comment #0 has a perfect explanation

Remediation:
Ensure all untrusted data (in this case, user input) is correctly encoded in the resulting HTML.  See https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines#Preventing_XSS for more information.