This question already has an answer here:
- How serious are XSS attacks 3 answers
I am just wondering about XSS attacks. Lets say I have a normal website, but it displays a few things based on $_GET variables. The website has no login system, all users can do is browse different pages which are dynamic. In this scenario, what is the worse someone can do?
A more important question to me though is this. Say my website is in my public_html folder, within its own folder. So the url might look something like this
Lets say that siteA is vunerable to XSS. Now in public_html folder, I have different sites and forms within their own folder. So I might have
If Site A is vunerable, can they do anything with Site B?