News for hackers. Stuff that matters.

A comment on PayPal.com XSS Vulnerability. Parent comment

Re:PayPal.com XSS Vulnerability by hidden-markov on Sunday May 26, 2013 @06:55PM (#5772735)
Isn't this CSRF?
[ Parent | on HN ]
Re:PayPal.com XSS Vulnerability by unfed on Sunday May 26, 2013 @07:15PM (#5772774)
Combination of XSS and CSRF.
[ Parent | on HN ]
Re:PayPal.com XSS Vulnerability by benregenspan on Sunday May 26, 2013 @07:42PM (#5772831)
This seems like it's just plain XSS - it doesn't take advantage of a user's serverside session to forge an action on their behalf.
[ Parent | on HN ]