Re:PayPal.com XSS Vulnerability
by unfed on Sunday May 26, 2013 @07:15PM
(#5772774)
Combination of XSS and CSRF.
[ Parent
| on HN ]
Re:PayPal.com XSS Vulnerability
by benregenspan on Sunday May 26, 2013 @07:42PM
(#5772831)
This seems like it's just plain XSS - it doesn't take advantage of a user's serverside session to forge an action on their behalf.