Re:Tumblr hacked?
by look_lookatme on Monday December 03, 2012 @11:13AM
(#4866040)
XSS worm
[ Parent
| on HN ]
how does it work ?
Re:Tumblr hacked?
by sparkinson on Monday December 03, 2012 @11:55AM
(#4866337)
This is a guess:
User opens up their dashboard, which displays a post that contains the XSS.
That script then makes a post using the users account to their own blog, further spreading the rogue script.