+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: XSS vuln (/showthread.php?tid=6331046)
XSS vuln - gr3yhat2 - Aug 28, 2026
why is reflected xss a big vulnerability if its client side?
RE: XSS vuln - Money- - Aug 28, 2026
Its usually not until you are able to chain it with other exploits to escalate privileges.
RE: XSS vuln - DramaKing - Aug 28, 2026
(Aug 28, 2026 03:05 AM)gr3yhat2 Wrote: why is reflected xss a big vulnerability if its client side?
It's a big vulnerability to the user without CSP and the 'Secure' and 'HTTP Only' cookie flags set. I'd give you an example of reflected XSS, but the Cloudflare WAF would have a fit.