21-08-2020 18:11 via infosecurity-magazine.com

Cross-Site Scripting Tops CWE's Most Dangerous List

Cross-Site Scripting Tops CWE's Most Dangerous ListCross-site scripting has topped the 2020 list of the 25 Most Dangerous Software Weaknesses compiled by the Common Weakness Enumeration (CWE). The vulnerability, described by the CWE as "improper neutralization of input during web page generation," was given a threat score of 46.82. Describing the dangers posed by cross-site scripting (XSS), CWE wrote: "The attacker could transfer private information, such as cookies
Read more »