
Cross site scripting
vulnerabilities are mistakenly considered unimportant, but they could
allow attackers to inject client-side script in web pages visited by
victims.
A cross-site scripting (xss) vulnerability may be exploited by hackers to bypass access controls going beyond the exceptions.
An Egyptian information security advisor Ebrahim Hegazy (Zigoo) has found an XSS vulnerability in the Avira license daemon. license.avira.com
But...