This webinar provides a demonstration of how a malicious user can leverage spreadsheet upload functionality to exploit one of the most pervasive and severe web application vulnerabilities, Cross-site Scripting.
This webinar will cover:
- What is cross-site scripting and the three types of XSS injection
- Why not encoding special characters leaves the application vulnerable to cross-site scripting
- The business impact of this Stored DOM XSS

Access on-demand webinars and additional resources at

Webinar: Uploading JavaScript via Spreadsheet: A Stored Cross-site Scripting Demonstration

Thursday, June 16, 2016 at 10:00 AM PT


David Jaquess
Team MA Houston
WhiteHat Security