XSS Hello!
If you are logged in, you will get an alert with some of your account details
If I was malicious, I could collect more data (such as saved credit cards, full addresses, names, order history, etc), place orders on your behalf, delete your account, sell your data etc.
As this was not done with malicious intent no data is transmitted anywhere as part of this XSS. It is simply shown in a message box and lost to time after you close it.
No comments:
Post a Comment