New Attack Called “XSSJacking” Discovered That Combined of Clickjacking, Pastejacking and Self-XSS Attacks

A New Attack method called “XSSJacking” a type of Web application Clickjacking, Pastejacking and Self-XSS Web application based Attack Discovered by the Security Researcher Dylan Ayrey.

While Clickjacking vulnerability existing in particular page, this attack will trigger Self-XSS.


“Self–XSS is a social engineering attack used to gain control of victims’ web accounts.In a self–XSS attack, the victim of the attack accidentally runs malicious code in his/her own web browser, thus exposing it to the attacker.

Read More at GBhackers On Security