--- title: "#cross-site-scripting articles | Hashnode" description: "Explore 25 articles tagged #cross-site-scripting on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/cross-site-scripting" --- Tag # #cross-site-scripting 25 posts · 0 followers [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 1](https://hashnode.com/posts/webversepro-snowedout-writeup/6a96cbdf9d4951f2dcb9645a) ### [WebVersePro : SnowedOut writeup](https://exploitnotes.hashnode.dev/webversepro-snowedout-writeup?utm_source=hashnode&utm_medium=feed) SnowedOut on WebVerseLabs Pro: exploit Pinehollow Plow Tracker with JavaScript injection and forged CSP reports to retrieve the flag. 6 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/webversepro-snowedout-writeup?utm_source=hashnode&utm_medium=feed) [Sreeram K S](https://hashnode.com/@sreeram-ks) · [Jun 20](https://hashnode.com/posts/what-is-xss-cross-site-scripting/6a365a8b83a40a289b43236e) ### [What is XSS (Cross-Site Scripting)?](https://code-as-a-story.hashnode.dev/what-is-xss-cross-site-scripting?utm_source=hashnode&utm_medium=feed) How a website accidentally runs someone else’s code 6 min read · [code-as-a-story.hashnode.dev](https://code-as-a-story.hashnode.dev/what-is-xss-cross-site-scripting?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [May 21](https://hashnode.com/posts/new-zero-day-on-microsoft-exchange-just-one-email-can-steal-an-entire-owa-login-session/6a0eca208b034602211a8da5) ### [New Zero-Day on Microsoft Exchange: Just one email can steal an entire OWA login session.](https://blog.fiscybersec.com/new-zero-day-on-microsoft-exchange-just-one-email-can-steal-an-entire-owa-login-session?utm_source=hashnode&utm_medium=feed) Risk summary Recently, a particularly severe vulnerability was discovered, causing significant concern within the security community. Just a single carefully crafted email is enough to execute malicio 9 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/new-zero-day-on-microsoft-exchange-just-one-email-can-steal-an-entire-owa-login-session?utm_source=hashnode&utm_medium=feed) [Roshni Rajani](https://hashnode.com/@roshnirajani) · [Apr 2](https://hashnode.com/posts/xss-happens-only-in-open-source-is-a-myth/69ce0b522d4d5bd0f0a0cd3f) ### [XSS happens only in Open Source is a myth.](https://roshnirajanii.hashnode.dev/xss-happens-only-in-open-source-is-a-myth?utm_source=hashnode&utm_medium=feed) XSS happens only in Open Source is a myth 1 min read · [roshnirajanii.hashnode.dev](https://roshnirajanii.hashnode.dev/xss-happens-only-in-open-source-is-a-myth?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Mar 14](https://hashnode.com/posts/csp-bypass/69b59165210c74252f0bad5d) ### [CSP Bypass in DVWA](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed) Documented penetration test of CSP Bypass vulnerability in DVWA. 16 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed) [ZeroTrust Ops](https://hashnode.com/@Zer0Trust) · [Dec 29, 2025](https://hashnode.com/posts/day-11-web-exploitation-merry-xssmas/6951ffc7e1f153011596e502) ### [Day 11: Web Exploitation – Merry XSSMas](https://navyacyber.hashnode.dev/day-11-web-exploitation-merry-xssmas?utm_source=hashnode&utm_medium=feed) I’m exploiting XSS vulnerabilities in McSkidy’s message portal to capture flags and learn how to secure web applications against JavaScript injection. 2 min read · [navyacyber.hashnode.dev](https://navyacyber.hashnode.dev/day-11-web-exploitation-merry-xssmas?utm_source=hashnode&utm_medium=feed) [TechSolve Central](https://hashnode.com/@techsolve94) · [Aug 28, 2025](https://hashnode.com/posts/protect-your-laravel-app-from-xss-attacks-with-these-pro-tips/68b0607830b0b6a087bdad4e) ### [Protect Your Laravel App from XSS Attacks with These Pro Tips!](https://techsolvecentral.hashnode.dev/protect-your-laravel-app-from-xss-attacks-with-these-pro-tips?utm_source=hashnode&utm_medium=feed) Learn how to secure your Laravel app against XSS vulnerabilities with simple techniques, input sanitization, and admin panel security—keep your data safe and your app hacker-proof!Read the full article#Laravel #Security #XSS #WebDevelopment #PHP #Cyb... 1 min read · [techsolvecentral.hashnode.dev](https://techsolvecentral.hashnode.dev/protect-your-laravel-app-from-xss-attacks-with-these-pro-tips?utm_source=hashnode&utm_medium=feed) [Gihan Shamike Liyanage](https://hashnode.com/@gihanshamikeliyanage) · [Jul 21, 2025](https://hashnode.com/posts/lesson-2-stored-xss-cross-site-scripting-page-redirection-1/687de98b5b20c1d6d7b09083) ### [Lesson 2: Stored XSS (Cross-Site Scripting) Page Redirection](https://zero-day-one.hashnode.dev/lesson-2-stored-xss-cross-site-scripting-page-redirection-1?utm_source=hashnode&utm_medium=feed) Stored XSS occurs when malicious scripts are permanently stored on a web server (e.g., in a database or comment field) and later executed in users’ browsers 3 min read · [zero-day-one.hashnode.dev](https://zero-day-one.hashnode.dev/lesson-2-stored-xss-cross-site-scripting-page-redirection-1?utm_source=hashnode&utm_medium=feed) [Ido Abramov](https://hashnode.com/@lookkattme) · [Jul 4, 2025](https://hashnode.com/posts/hackthebox-cross-site-scripting-xss-skills-assessment-walkthrough/6867d7919003bc6d77db7155) ### [HackTheBox - Cross-Site Scripting (XSS) - Skills Assessment Walkthrough](https://id0xa.hashnode.dev/hackthebox-cross-site-scripting-xss-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) Scenario We are performing a Web Application Penetration Testing task for a company that hired you, which just released their new Security Blog. In our Web Application Penetration Testing plan, we reached the part where you must test the web applicat... 2 min read · [id0xa.hashnode.dev](https://id0xa.hashnode.dev/hackthebox-cross-site-scripting-xss-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) [Kshitij Sharma](https://hashnode.com/@kshitijcodes) · [Jun 8, 2025](https://hashnode.com/posts/xss-vulnerabilities-in-frontend-system-design-a-practical-guide-for-frontend-engineers/684538a362cff2a51fad643c) ### [XSS Vulnerabilities in Frontend System Design: A Practical Guide for Frontend Engineers](https://kshitijcodes.hashnode.dev/xss-vulnerabilities-in-frontend-system-design-a-practical-guide-for-frontend-engineers?utm_source=hashnode&utm_medium=feed) Ultimate Security Manual for Frontend Developers: Block XSS Threats in React & Next.js Apps (Includes Interview Tips & Code Snippets) 13 min read · [kshitijcodes.hashnode.dev](https://kshitijcodes.hashnode.dev/xss-vulnerabilities-in-frontend-system-design-a-practical-guide-for-frontend-engineers?utm_source=hashnode&utm_medium=feed)