Cross-Site Scripting (XSS)

mozilla firefox is vulnerable to cross-site scripting XSS attacks. A user-assisted remote attackers can create a specially crafted HTML malicious local shortcut file in the same local directory to load an arbitrary website in violation of same-origin policy, allowing for data theft...