2 ms·
A couple of examples: I can send an HTML email with a script tag or object tags referencing an external JavaScript or Flash file, and it will happily pull that
by mike-cardwell 15y ago
A couple of examples: I can send an HTML email with a script tag or object tags referencing an external JavaScript or Flash file, and it will happily pull that into the page and execute it within your DOM.
Here are some demo XSS attacks:
http://dudmail.com/emails/162551?mailbox=xss http://dudmail.com/emails/162551?mailbox=xss