Security Vulnerabilities Reported

1. Security Vulnerabilities Reported
2. uscode.house.gov

WON'T FIX uscode.house.gov

uscode.house.gov

XSS vulnerability through the search results page.

The search query is sent as a GET parameter and is not escaped when rendered within a JavaScript block on the search results page. This allows code to be executed directly from a malicious URL.

<script type="text/javascript">loadTextValues("");location='http://evil.com'//", "", "");</script>

Reported over 8 years ago Won't Fix