XSS vulnerability

As it became known, Sunday, hackers attacked Google's ultra-popular video sharing site YouTube, exploiting a cross-site scripting (XSS) vulnerability. Thus, the section suffered mostly appeared to be the section where users post comments.

This malicious attack compromised YouTube cookies of users who visited a compromised page, but it couldn't be used to access their Google accounts.