Don't be a WordPress RCE-hole and patch up this XSS vuln, pronto
Not on 5.1.1? You should be
14 Mar 2019
Articles about Xss
Epic's Fortnite fail: Ancient UT2004 server used for login-stealing proof-of-concept
A tale of XSS, SQL injection and OAuth implementation
16 Jan 2019
Sealed with an XSS: IT pros urge Lloyds Group to avoid web cross talk
Online login details could be harvested by miscreants – bank says: We're secure
20 Sep 2018
Criminal mastermind injects malicious script into Ethereum tracker. Their message? '1337'
Etherscan XSS snafu could have been much, much worse
25 Jul 2018
uBlock Origin ad-blocker knocked for blocking hack attack squawking
Block all the things! No, wait, not the XSS security alerts
17 Oct 2017
Microsoft won't patch Edge browser content security bypass
Tells Cisco's Talos it's a feature, not a bug. Apple and Google disagree and fixed it
07 Sep 2017
Aruba AirWave admin? Get the latest patch
XML and cross-site scripting bug-fixes
02 Mar 2017
'I found a bug that let anyone read anyone's Yahoo! Mail and all I got was this $10k check'
Sorry! Too! hungover! from! rum! eggnog! binging! to! shout! in! the! headline!
09 Dec 2016
Bletchley Park Trust vows to shore up insecure website
Security boffin blasts caretakers of Alan Turing's legacy
29 Nov 2016
Google tries to cross out XSS attacks by releasing its own test tool
Just about every content security policy does it wrong
27 Sep 2016
GoDaddy plugs account hijack XSS vulnerability
Forgotten payload borks support call
10 May 2016
Zen Cart admins: Don't skip version 1.5.5
Hiding behind all those points is a patch for an admin-interface XSS mess
30 Mar 2016
VMware vRealizes that vRealize has XSS bugs on Linux
Virtzilla's also released first maintenance release for vRealize Automation
16 Mar 2016
Yahoo! Mail! Had! Nasty! XSS! Bug!
Finnish fellow scores $10k bug bounty for reporting malformed HTML mess
19 Jan 2016
Unconfirmed PayPal 0day auth flaw lingers after XSS gets fixed
Brace of bugs unveiled in payment facilitator's security structure
04 Sep 2015
Salesforce plugs silly website XSS hole, hopes nobody spotted it
Web development 101: Thou shalt stop thy users from inputting JavaScript
14 Aug 2015
XSSposed launches pay-whatever bug bounty
Tick tock clock counts down to Full Disclosure
07 Jul 2015
US National Vulnerability Database contained ... yup, an XSS vuln
NIST attempts to create some kind of ironic self-referencing meta-vuln
18 Jun 2015
Create a news alert about Xss, or find more stories about Xss.
