Facebook Hit by XSS Worm

A Facebook cross-site scripting (XSS) vulnerability was used to launch a self-propagating spam worm on the social network, according to security researchers from Symantec.The XSS vulnerability was located in the Facebook mobile API and was caused by insufficient JavaScript validation.[ADMARK=... [ read more >> ]