Full Disclosure, sla.ckers.org, and other hacker forums: These are not the places where you first want to learn about a cross-site scripting vulnerability on your Website. Nor do you want to find out ...