InfoSecBulletin Cybersecurity for mankind
Cross-Site Scripting (XSS) is one of the oldest and most persistent vulnerabilities in modern applications. Despite being recognized for over 20 years, it still affects both legacy systems and new cloud-native architectures.
The Microsoft Security Response Center (MSRC) noted that the threat of XSS remains significant, as it regularly receives reports about it across various services and applications.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
A recent MSRC report highlighted the ongoing threat of XSS vulnerabilities, noting that advanced security measures like Content Security Policies (CSP) and secure libraries are still insufficient.
Since January 2024, the MSRC has addressed over 970 XSS cases, showing their ongoing commitment to handling this type of vulnerability.
XSS By The Numbers:
Between July 2024 and July 2025, XSS vulnerabilities accounted for 15% of all “Important” or “Critical” security cases handled by the MSRC.
The center handled 265 XSS cases, with 263 deemed Important and two Critical. Microsoft rewarded security researchers with $912,300 for identifying these vulnerabilities.
The highest reward for a significant XSS attack, like token theft or a zero-click exploit, was $20,000. Click here to read the full report here.
