News cross-site scripting

TalkTalk Slated For Tardy Response To Website Flaw

How long? TalkTalk failed to fix cross-site scripting error until this week, despite being informed two years ago

Patch that firmware now BT urges, after researchers uncover security issues with Wi-Fi extender device

XSS may be the easiest way for someone to attack your website, but there are self-defence steps you can take

Security experts have condemned the online security at eBay after another attack exposes user data

XSS flaws are the most common vulnerabilities on the Internet. Website owners should kill them, says Tom Brewster

Facebook cross-site-scripting exploit uses "bully video" to deliver a sophisticated payload

Twitter implements its Content Security Policy for Firefox 4 to block cross-site scripting attacks

A number of cross-site scripting flaws could have allowed attacks on users of Twitter, Facebook and MySpace