2 ms·

how does it work ?

• sparkinson 14y ago
  This is a guess: User opens up their dashboard, which displays a post that contains the XSS. That script then makes a post using the users account to their own blog, further spreading the rogue script.