Exploiting cross-site scripting to capture passwords 1 Exploiting cross-site scripting to capture passwords 18/01/2025