A XSS was found in Stack Overflow

Stack Overflow should feel embarrassed for this. Blatant XSS attack, script tags included. User credentials could have easily been stolen as a result of this.

I hope they force invalidate all sessions as a precaution instead of trying to brush this under the rug.

I’m surprised Stack Overflow doesn’t have a CSP that would prevent this.

Interesting how it only took this little time for the vulnerability to appear and it being found