Skip to main content

Cross-Site Scripting (XSS)

Last updated August 24, 2026
Human View Machine View

This is the page you're already on — the Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

WebSite 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}
Organization 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}
BreadcrumbList 
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/",
      "name": "Glossary",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/cross-site-scripting-xss/page/2/",
      "name": "Cross-Site Scripting",
      "position": 3
    }
  ]
}
DefinedTerm 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/page/2/#definedterm",
  "@type": "DefinedTerm",
  "description": "Cross-site scripting (XSS) is a web application vulnerability that enables execution of attacker-controlled scripts in users’ browsers, risking account compromise and data exposure. It matters in enterprise contexts because it targets authenticated sessions in critical business applications and portals.",
  "inDefinedTermSet": {
    "@id": "https://decisioninsights.ai/term/#termset",
    "@type": "DefinedTermSet",
    "url": "https://decisioninsights.ai/term/"
  },
  "name": "Cross-Site Scripting",
  "subjectOf": [
    {
      "@id": "https://decisioninsights.ai/automated-logic-webctrl-premium-server-vulnerabilities-identified/#blogposting",
      "@type": "BlogPosting",
      "headline": "Automated Logic WebCTRL Premium Server Vulnerabilities Identified",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-01"
      },
      "url": "https://decisioninsights.ai/automated-logic-webctrl-premium-server-vulnerabilities-identified/"
    },
    {
      "@id": "https://decisioninsights.ai/lectora-software-xss-vulnerability-requires-course-republishing/#blogposting",
      "@type": "BlogPosting",
      "headline": "Lectora Software XSS Vulnerability Requires Course Republishing",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Laurie Tyzenhaus"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/780141"
      },
      "url": "https://decisioninsights.ai/lectora-software-xss-vulnerability-requires-course-republishing/"
    },
    {
      "@id": "https://decisioninsights.ai/kiwire-captive-portal-faces-three-identified-web-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "Kiwire Captive Portal faces three identified web vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Christopher Cullen"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/887923"
      },
      "url": "https://decisioninsights.ai/kiwire-captive-portal-faces-three-identified-web-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/daily-intelligence-brief-wi-fi-7-updates-5g-connectivity-and-security-advisories-november-14-2025/#blogposting",
      "@type": "BlogPosting",
      "headline": "Daily Intelligence Brief: Wi-Fi 7 Updates, 5G Connectivity, and Security Advisories - November 14, 2025",
      "url": "https://decisioninsights.ai/daily-intelligence-brief-wi-fi-7-updates-5g-connectivity-and-security-advisories-november-14-2025/"
    },
    {
      "@id": "https://decisioninsights.ai/advantech-deviceon-iedge-faces-multiple-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "Advantech DeviceOn/iEdge Faces Multiple Vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01"
      },
      "url": "https://decisioninsights.ai/advantech-deviceon-iedge-faces-multiple-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/aveva-discloses-vulnerability-in-application-server-ide/#blogposting",
      "@type": "BlogPosting",
      "headline": "AVEVA Discloses Vulnerability in Application Server IDE",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-02"
      },
      "url": "https://decisioninsights.ai/aveva-discloses-vulnerability-in-application-server-ide/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-and-partners-release-advisory-update-on-akira-ransomware/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA and Partners Release Advisory Update on Akira Ransomware",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/13/cisa-and-partners-release-advisory-update-akira-ransomware"
      },
      "url": "https://decisioninsights.ai/cisa-and-partners-release-advisory-update-on-akira-ransomware/"
    },
    {
      "@id": "https://decisioninsights.ai/rockwell-automation-alerts-users-to-factorytalk-datamosaix-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "Rockwell Automation Alerts Users to FactoryTalk DataMosaix Vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-07"
      },
      "url": "https://decisioninsights.ai/rockwell-automation-alerts-users-to-factorytalk-datamosaix-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-advisory-update-on-akira-ransomware-threats/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA Issues Advisory Update on Akira Ransomware Threats",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/13/cisa-and-partners-release-advisory-update-akira-ransomware"
      },
      "url": "https://decisioninsights.ai/cisa-issues-advisory-update-on-akira-ransomware-threats/"
    },
    {
      "@id": "https://decisioninsights.ai/kiwire-captive-portal-vulnerabilities-prompt-update-recommendation/#blogposting",
      "@type": "BlogPosting",
      "headline": "Kiwire Captive Portal vulnerabilities prompt update recommendation",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Christopher Cullen"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/887923"
      },
      "url": "https://decisioninsights.ai/kiwire-captive-portal-vulnerabilities-prompt-update-recommendation/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-vulnerability-cve-2025-27915-to-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds vulnerability CVE-2025-27915 to catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/10/07/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-vulnerability-cve-2025-27915-to-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/advantechs-deviceon-iedge-faces-security-issues/#blogposting",
      "@type": "BlogPosting",
      "headline": "Advantech's DeviceOn/iEdge faces security issues",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01"
      },
      "url": "https://decisioninsights.ai/advantechs-deviceon-iedge-faces-security-issues/"
    }
  ],
  "termCode": "XSS",
  "url": "https://decisioninsights.ai/term/cross-site-scripting-xss/page/2/"
}
CollectionPage 
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/page/2/",
  "@type": "CollectionPage",
  "dateModified": "2026-08-24T03:12:34Z",
  "description": "Cross-site scripting (XSS) is a web application vulnerability that enables execution of attacker-controlled scripts in users’ browsers, risking account compromise and data exposure. It matters in enterprise contexts because it targets authenticated sessions in critical business applications and portals.",
  "isPartOf": {
    "@id": "https://decisioninsights.ai/#website"
  },
  "mainEntity": {
    "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/page/2/#definedterm"
  },
  "name": "Cross-Site Scripting",
  "sdDatePublished": "2026-08-24",
  "sdPublisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai/term/cross-site-scripting-xss/page/2/"
}
What we add

Graph

A glossary entry defines a term and stops there. It doesn't show where the term is actually being used or written about. We track and link every article that covers it.

BlogPosting Automated Logic WebCTRL Premium Server Vulnerabilities Identified BlogPosting Lectora Software XSS Vulnerability Requires Course Republishing BlogPosting Kiwire Captive Portal faces three identified web vulnerabilities and 9 more on this page

The person who sent this agent gets an answer they can act on

Somebody dispatched this agent to evaluate Cross-Site Scripting for a real decision: a shortlist, a vendor comparison, a purchase. "Cross-Site Scripting makes X" isn't something they can act on; they need to know the claim is real and where it came from. Follow one enriched link from Act 2 and see what the agent can actually hand back to them:

  1. The record DefinedTerm Cross-Site Scripting
  2. One of its 12 linked records BlogPosting Automated Logic WebCTRL Premium Server Vulnerabilities Identified https://decisioninsights.ai/automated-logic-webctrl-premium-server-vulnerabilities-identified/
  3. The primary source CreativeWork cisa.gov https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-01 Original author: CISA

Our summary is written by Decision Insights Threat Desk. The source keeps its own byline, credited above. Both are in the JSON.