CISA, FBI Issue Alert on Cross-Site Scripting Vulnerabilities

The Cybersecurity and Infrastructure Security Agency and the FBI have released a Secure by Design Alert concerning cross-site scripting vulnerabilities, or XSS. CISA said Tuesday that XSS can be prevented and ought not to be present in software products, yet they continue to appear, providing threat actors with exploit opportunities. According to the alert, XSS can be brought about by the failure of a software maker to properly escape, validate or sanitize inputs, making it possible for threat actors to inject malicious scripts into web applications. The alert calls on leaders at technology manufacturers to instruct personnel to conduct aThe post CISA, FBI Issue Alert on Cross-Site Scripting Vulnerabilities first appeared on Executive Gov.