there is a high volume of xss vulnerabilities on this list. take the next
step to disclose why xss important for the affected program. for instance,
creating a test case that does something privileged or malicious towards a
visitor. in attempting to create a keystroke logger in javascript i've found
it drops random keystrokes (i think its a speed problem). and i would be
interested in seeing more malicious javascript.
again please justify why xss is valuable in disclosures of these
vulnerabilties
even if its just a cookie stealer, please show why an attacker would want
those cookies or how he/she could use them to create a security issue.
thanks
feofil