Vulnerability
vulnerability:cross_site_scripting
Also: XSS, cross-site scripting vulnerability
Web vulnerability discussed as allowing JavaScript injection into a page and potentially enabling account theft.
Web vulnerability discussed as allowing JavaScript injection into a page and potentially enabling account theft.
“I found a cross-site scripting vulnerability”
“it allowed me to inject JavaScript into that web page”
Web application vulnerability found on the adult-content site.
“We had found a couple of cross-site scripting bugs”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Daniel Kelley | Explicit | 117 |
| outgoing | AFFECTS | CyberChef | Explicit | 117 |
| incoming | EXPLOITS | Jason Haddix | Explicit | 130 |
cross-site scripting DISCOVERED_BY Daniel Kelley
Daniel found a cross-site scripting vulnerability on a Microsoft subdomain.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I found a cross-site scripting vulnerability in – on a subdomain in this login panel”
cross-site scripting AFFECTS CyberChef
Daniel found a Git-based XSS vulnerability in CyberChef when it was first published.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“when they first published it, there was a git based XSS in it”
Jason Haddix EXPLOITS cross-site scripting
Jason found and exploited cross-site scripting bugs on the site.
Explicit Confidence 98% · Jason Haddix EP 130 Details
“We had found a couple of cross-site scripting bugs”