Massive XSS Attack Exploits Hundreds of Sites, Including Yale, CNN, and Government Sites, for SEO Poisoning
A common cross-site scripting (XSS) vulnerability has been discovered to affect hundreds of websites, including those of major institutions like Yale University, CNN, and various government websites. The 360XSS attack, as it has come to be known, exploits a vulnerability in the Krpano virtual tour software to serve malicious advertisements and enhance search engine optimization […]