rvso1 made the first post
The attacker can send to victim a link containing a malicious URL in an email or instant message
can perform a wide variety of actions, such as stealing the victim's session token or login credentials
GET parameter 'index' is vulnerable to RXSS...