Lot of articles underline that XSS vulnerabilities can be very dangerous for the website on which they exist. I wonder how much is this true when we find these XSS vulnerabilities on the frontend of a website, in fields such as the search forms ?
Cross-site scripting vulnerabilities are extremely dangerous, because they allow the attacker to control the victim's browser to some extend.
This can be used for all kinds of malicious actions:
So while XSS may look less dangerous than, say, SQL injections at first site, it's actually a major threat for both your users and your server.