Submitted by admin on Sun, 12/18/2016 - 00:53 TL;DR: AddThis is a share button used by over a million sites. They were all vulnerable to XSS earlier this year. In my previous post I described the pitfalls… Link: https://labs.detectify.com/2016/12/15/postmessage-xss-on-a-million-sites/ Rating: 0No votes yet