Tag

Cross-Site Scripting Explained

posts

Cross-Site Scripting

Cross-Site Scripting Explained: What Attackers See

A Single Input Field Took Down British Airways In 2018, British Airways disclosed a breach that compromised the personal and financial data of approximately 380,000 customers. The attack vector? A modified script injected into their website's payment page. The UK's Information Commissioner's Office

Carl B. Johnson Jun 08, 2026 5 min read
Cross-Site Scripting

Cross-Site Scripting Explained: A Practical Guide

British Airways Lost $230 Million Because of a Script In 2018, British Airways disclosed a breach that exposed the payment card details of roughly 380,000 customers. The attack vector? A malicious script injected into the airline's payment page — a textbook cross-site scripting exploitation. The UK's

Carl B. Johnson Jan 09, 2023 8 min read
Cross-Site Scripting

Cross-Site Scripting Explained: A Real-World Guide

The Attack That Hides in Plain Sight on Your Website In 2018, British Airways disclosed a breach that compromised the personal and financial data of roughly 380,000 customers. The attack vector? A modified JavaScript injected into the airline's payment page — a textbook cross-site scripting attack that skimmed

Carl B. Johnson Mar 04, 2020 7 min read