Hacker with name “B1uB3rry” expose that Forbes.com is vulnerable to possible SQL injection but confirmed to be vulnerable to Cross Site Script Injection (XSS) & HTML Injection. According to hacker “One can easily deface the website as other vulnerabilities exist” Another XSS vulnerability also exposed by a hacker on Twitter. This Vulnerability also exposed on Twitter: @Forbes.com.com Vulnerable to XSS injection. #Forbes is Vulnerable.com.
Source: https://thehackernews.com/2011/08/forbescom-vulnerable-to-xss-injection.html