Yikes. Any site with a publicly accessible swfupload.swf is open to XSS. https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/ h

Yikes. Any site with a publicly accessible swfupload.swf is open to XSS. https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/ https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-appl...