U.S. Dept Of Defense: Reflected XSS on ██████.mil

A reflected XSS vulnerability was discovered on a military website, allowing an attacker to fetch cookies/tokens from any website requiring login by using a CORS bug if the site is vulnerable to CORS. The vulnerability was exploitable by injecting a script into the search bar...