Cross-site scripting (XSS) vulnerabilities on the National Health Service's website created a means to send spoofed emails with dodgy medical advice.The vulnerabilities, now fixed, also created a potential means to run information-harvesting attacks 3 Vote(s)