Security CNN Cross Site Scripting / Open Redirect December 29, 2014 007admin Leave a comment The travel.cnn.com and ads.cnn.com sites suffer from cross site scripting and open redirection vulnerabilities.