Stored cross-site scripting

Named by 2 kept items in this workspace.

Search every workspace for Stored cross-site scripting. It matches the name as written, so it can find other things that share it.

The items that name it 2

When Business Email Compromise Starts Rewriting Reality
writeup2026-09-24It is written here as Stored cross-site scripting (XSS).
Used in CVE-2025-27915 via a crafted .ICS calendar attachment in the Classic Web Client.
Orca: Splunk Enterprise Critical CVEs
advisory2026-06-12
Injecting persistent script into classic dashboard HTML panels that executes in the browsers of users viewing the affected dashboards.

All techniques in this workspace.