4 ms·
A XSS was found in Stack Overflow
- junon 5y agoStack Overflow should feel embarrassed for this. Blatant XSS attack, script tags included. User credentials could have easily been stolen as a result of this. I hope they force invalidate all sessions as a precaution instead of trying to brush this under the rug.
- tinus_hn 5y agoInteresting how it only took this little time for the vulnerability to appear and it being found
- Svetlitski 5y agoI’m surprised Stack Overflow doesn’t have a CSP that would prevent this.