3 ms·
This is unfortunately the case with automated vulnerability scans. And while it's true that XSS can't be used to hack the SERVER it's still a major concern for
by cstejerean 19y ago
This is unfortunately the case with automated vulnerability scans. And while it's true that XSS can't be used to hack the SERVER it's still a major concern for two reasons:
1. the user's data is still at risk due to client side attacks
2. lack of attention paid to validating user input could mean that other more serious problems are likely to occur as well (like SQL injection)