---
id: 3329
title: "Big Bugs | Episode 5: Big XSS–Not an Oxymoron"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/big-bugs-podcast-big-xss-not-an-oxymoron/"
published_at: "2016-08-30T00:00:00Z"
tags: ["bug-bounty", "account-takeover", "xss", "bugcrowd", "vulnerability-analysis", "exploit-chain", "big-bugs-podcast"]
phying_url: "https://phying.com/item/3329"
lang: en
---

# Big Bugs | Episode 5: Big XSS–Not an Oxymoron

## Summary

Big Bugs Episode 5 argues that 'big XSS' is not an oxymoron: though XSS is often dismissed as low-hanging fruit, exploit chains show it can drive ransomware and full account takeover.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2016-08-30T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/big-bugs-podcast-big-xss-not-an-oxymoron/
- **Phying News:** https://phying.com/item/3329