Date:
02 March 2006
Incident Type: Vulnerability Disclosure
WASC Threat Classification: Cross-site Scripting
A 14 years old claims to have discovered an XSS flaw in Google's Gmail. Comments have been mixed, and Google did not comment, so either the flaw was fixed pretty fast, or did not exits.
References: