XSS
Noun
Meaning
XSS (uncountable)
(computer security, Internet) Initialism of cross-site scripting.
Examples
A bug-bounty award for an XSS flaw is about $501, well below the $3,650 average award for a critical flaw, allowing organizations to mitigate the common bug on the cheap, researchers noted.
The first bug is an authenticated reflected XSS problem (CVE pending), which is a medium-severity issue ranking 6.5 on the CvSS scale.
But maybe XSS defence wasn’t the modus operandi in this case?
An XSS attack isn't enough, the attacker needs to be able to create a resource on the origin to act as the ServiceWorker.
Because reflected XSS isn't a persistent attack, the attacker must deliver the payload to each victim.
By leveraging persistent (stored) XSS, a hacker can input a dangerous payload and have it saved by the server.