> Also - why would a blog be threatened by XSS? A blog is a collection of static HTML files and I assume the creator would be using a composer or just a text ed

> Also - why would a blog be threatened by XSS? A blog is a collection of static HTML files and I assume the creator would be using a composer or just a text editor + browser to add and edit pages. Why would anyone log into a blog? Perhaps you've never heard of WordPress [0], the 17-year-old blogging software used by ~60 million web sites as of 2012 [1] and that is, today, "the platform of choice for over 35% of all sites across the web" [2]? --- [0]: https://wordpress.org https://wordpress.org [1]: https://web.archive.org/web/20160129215921/http://www.forbes.com/sites/jjcolao/2012/09/05/the-internets-mother-tongue/ https://web.archive.org/web/20160129215921/http://www.forbes... [2]: https://wordpress.org/about/ https://wordpress.org/about/