This is potentially very bad, since it is one way to enable phishing. For example, suppose a Web page with a cross-site scripting vulnerability belonged to a bank.

WordPress recommends updating to the version 6.5.2 security and maintenance release that patches an XSS vulnerability ...

WordPress plugin vulnerability affecting up to 600,000 websites enables stored XSS exploit An advisory was issued for the Ocean Extra WordPress plugin that is susceptible to stored cross-site ...

For years, XSS Auditor has been a unique feature on the browser landscape, and has helped Chrome stand apart from other browsers, being the only one which featured built-in XSS protection.

PayPal has resolved a reflected cross-site scripting (XSS) vulnerability found in the currency converter feature of user wallets.