We found 160 websites belonging to German tax offices (Finanzämter) vulnerable to reflected cross-site scripting. We passed the information to the German IT news site heise.de, which forwarded it to CERT-Bund, the German government Computer Emergency Response Team.
Disclosure#
Coverage: heise.de, “Viele Finanzämter mit unsicheren Websites” (German)
