XSS

Security folks often come across a long list of CVEs (Common Vulnerabilities and Exposures) and not all of them turn out to be real threats.