7 stories tagged xss, newest first.
235 points by aragonite | 101 comments
Blog post showing a technique to invoke arbitrary JavaScript functions without parentheses using Error.prepareStackTrace and prototype overrides.
41 points by tau255 | 23 comments
Orange Cyberdefense SCRT blog post describing how a vulnerable Twitch chat overlay in an unsandboxed OBS Browser Source plus a V8 bug enabled code execution on a streamer's PC.
136 points by arusekk | 27 comments
A vulnerability writeup describing a wormable XSS in SourceHut's ansi2html.py that let attackers take over accounts of users viewing injected build logs.
1080 points by hackermondev | 397 comments
A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.
487 points by jakey_bakey | 219 comments
Guardian article about a UK company forced by Companies House to change its name, which contained an HTML script tag that could enable cross-site scripting attacks.
322 points by stulle123 | 235 comments
A security researcher's writeup of a 1-click exploit chain in KakaoTalk using a deep link, DOM XSS, and Kakao Mail takeover to hijack accounts.
379 points by el_duderino | 120 comments
A blog post describing how the author found and exploited a cross-site scripting (XSS) vulnerability on chess.com.