Everything Shell Bulletin has reported about cross-site scripting: 3 stories, newest first. Part of our Vulnerabilities coverage.
AWS patches a cross-site scripting flaw in Kiro IDE that lets attackers run code through malicious color theme names when users open workspaces.
An HTML injection flaw in Fortinet management interfaces allows cross-site scripting via the Identity Provider name field, requiring immediate upgrades for version 6.2 users.
Output encoding stops most cross-site scripting attacks, while input validation alone leaves your application exposed to sophisticated injection techniques.