XSS at U.S. Department of Education

Program silently fixed the vulnerability

Abhirup Konwar

Follow

2 min read

·

Jun 27, 2025

84

2

Listen

Share

Press enter or click to view image in full size

🆓 Free Link (For Non-Members)

Report Date: Aug 16,2024

Vulnerability Type: RXSS

Vulnerability Status: Fixed but no certificate

According to the disclosure policy, we can’t share vulnerability details for 90 calendar days after receiving an acknowledgement, now it’s been 1 year and they failed to recognize my efforts. So I am sharing complete details as they silently fixed the vulnerability.

Where others are acknowledged with cool certs, mine got vanished in the air after the patch

Proof of Submission via Gmail

Press enter or click to view image in full size

Press enter or click to view image in full size