---
id: 3319
title: "XSS Bugs that Prove the Danger in ‘XSS-Fatigue’"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/xss-fatigue-realities-pitfalls-danger/"
published_at: "2016-10-10T00:00:00Z"
tags: ["account-takeover", "xss", "bugcrowd", "csrf", "vrt", "vulnerability-analysis"]
phying_url: "https://phying.com/item/3319"
lang: en
---

# XSS Bugs that Prove the Danger in ‘XSS-Fatigue’

## Summary

Bugcrowd pushes back on XSS-fatigue: over 25% of its submissions are XSS, and chained XSS plus CSRF attacks have enabled account takeover. Real cases and the updated VRT show XSS is still high impact.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2016-10-10T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/xss-fatigue-realities-pitfalls-danger/
- **Phying News:** https://phying.com/item/3319