This uses another one of the vectors on my page to propagate. If you allow objects that can embed flash, it can embed live script and JavaScript.

This entry was posted on Thursday, January 1st, 1970 at 12:00 am and is filed under XSS, Webappsec. Responses are currently closed, but you can trackback from your own site.