For many XSS is just a way to steal a cookie, and nothing else, but this is not the case, in the post of:
https://forum.antichat.ru/showpost.php?p=584229&postcount=17 Grey described the automation of this process - that is, stolen cookies will be used by scripts (you will not have to climb yourself and change your cookies on stolen) to send necessary for the creation of a new administrator, data. To have a knowledge engine and the "simple" XSS could lead to quite serious implications in terms of security.
This video, I not only want to show I have described in the post of actions, but also show that XSS is still serious vulnerability.
