Browse / Expedia Group Bug Bounty

Expedia Group Bug Bounty

See its reports on the map

What gets reported to Expedia Group Bug Bounty

• Information Disclosure2
• Cross-site Scripting2
• Open Redirect1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Open Redirect in Logout & LoginOpen Redirect · medium
   171 votes
2. Cache Deception Allows Account TakeoverUse of Cache Containing Sensitive Information · high
   160 votes
3. Cache Poisoning Allows Stored XSS Via hav Cookie Parameter (To Account Takeover)Cross-site Scripting (XSS) - Stored · high
   117 votes
4. Reflected XSS Via origCity Parameter (UPPER Case + WAF Protection Bypass)Cross-site Scripting (XSS) - Reflected · medium
   63 votes
5. Sensitive information for phpinfo.php at https://products.ean.com/Information Disclosure · low
   23 votes
6. https://www.wotif.com/vc/blog/info.php script is prone to reflected HTML/CSS injection and COOKIE leakCode Injection · low
   22 votes