D
Oct 9, 2026Drupal Webform XSS (CVE-2026-96367): what site builders need to check first
Drupal Webform XSS (CVE-2026-96367): what site builders need to check first ...
Oct 9, 20262 min read0 reactions0 comments
Back to articles 
Aug 12, 2026
Sep 18, 2026
Aug 12, 2026
Tag archive
#xss
C
Oct 9, 2026Contributed module risk in Drupal: the lesson behind CVE-2026-96360
Contributed module risk in Drupal: the lesson behind CVE-2026-96360
Oct 9, 20262 min read0 reactions0 comments
S
Oct 13, 2026SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a £400,000 Fine
SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a £400,000 Fine On October...
Oct 13, 202611 min read0 reactions0 comments
M
Sep 29, 2026Module inventory hygiene in the light of CVE-2026-96360
Module inventory hygiene in the light of CVE-2026-96360
Sep 29, 20262 min read0 reactions0 comments
W
Sep 29, 2026Why moderately critical advisories like CVE-2026-96360 get postponed
Why moderately critical advisories like CVE-2026-96360 get postponed
Sep 29, 20262 min read0 reactions0 comments
D
Sep 28, 2026Detecting and monitoring around CVE-2026-96360
Detecting and monitoring around CVE-2026-96360
Sep 28, 20262 min read0 reactions1 comments
T
Aug 29, 2026The Stored XSS That Got Downgraded to Low
A bug bounty submission comes back three days later with one line from triage: severity changed from...
Aug 29, 20262 min read0 reactions0 comments
W
Sep 3, 2026What is XSS? Understanding Cross-Site Scripting, the #1 Web Vulnerability
What Exactly is XSS? At its core, XSS is a vulnerability that allows an attacker to inject...
Sep 3, 20263 min read0 reactions0 comments
What Is Cross-Site Scripting (XSS)? Plain-English Guide
XSS lets attackers run their own code in your visitors' browsers. Learn how it works, whether your contact form is exposed, and exactly how to fix it.
Aug 12, 20266 min read0 reactions0 comments
C
Aug 12, 2026Clear the Lineup: XSS via innerHTML in cyberbro — Found and Fixed by GSC
What I Fixed A Cross-Site Scripting (XSS) vulnerability in cyberbro (122 ⭐), an...
Aug 12, 20262 min read0 reactions0 comments
BREAKING: WordPress comment XSS lets strangers plant script (7.1.1)
How to fix CVE-2026-93485: upgrade WordPress to 7.1.1
Sep 18, 20264 min read0 reactions0 comments
XSS Isn't Just a JavaScript Problem: How Developers Should Think About Cross-Site Scripting
You can build a beautiful web application, use a modern framework, follow a clean architecture — and...
Aug 12, 20264 min read0 reactions0 comments