CISA urges software devs to weed out XSS vulnerabilities

CISA and the FBI warned technology manufacturers about persistent cross-site scripting (XSS) vulnerabilities, urging organizations to adopt secure-by-design practices, perform thorough input validation and output encoding, and conduct adversarial testing and code review to prevent XSS in future software releases. The alert highlights XSS’s high prevalence (ranking second in MITRE's top 25 weaknesses for 2021–2022) and situates this guidance within CISA’s broader Secure by Design series of advisories.