XSS at Cnn.com – again
The target was Search.cnn.com.
This week, Xssed.com reports about the new issue.
According to the ‘Additional information’ field of the report
XSS in the “Get your local weather and news” form
No exact string was given.
Additionally, the Xssed database lists the issue as Unfixed.