Kid hackers break XSS defences, find hack hole in 2 million websites

HTML Comment Box clocked

Hackers Karim Rahal and Ibram Marzouk have found multiple cross-site scripting vulnerabilities in the HTML Comment Box that opened avenues to compromise visitors to some used by some 2 million websites."