7 ms·

Combination of XSS and CSRF.

• benregenspan 13y ago
  This seems like it's just plain XSS - it doesn't take advantage of a user's serverside session to forge an action on their behalf.