160 German tax office sites vulnerable to XSS
Reflected cross-site scripting across 160 German tax office websites, disclosed via heise.de and forwarded to CERT-Bund for coordinated remediation.
CERT coordination
There is no security contact to email, so it goes through a national CERT instead. Slow, and still the only channel that works.