eBay year-long patch stall a little XSSive, researcher says

Session jacking bug bores bug bounty boffins

Clarified Security researcher Jaanus Kääp has disclosed a year-old cross-site scripting (XSS) bug in eBay's messaging service that lets attackers target victims through messages.…

via The Register - Data Centre: Cloud
http://ift.tt/1dvOebO