This is the first part of a multipart series where I detail the numerous vulnerabilities that can lead to severe XSS-AJAX vulnerabilities. I was surprised to see how far the simple Cross Site Scripting vulnerabilities have come. The methods of finding and exploiting these vulnerabilities as well as the possible payloads have come so far in the last year that many testers, developers, project managers and CSO dont know how powerful a security problem this can be. This entry should serve as an introduction to the threat of cross site scripting and how they can be exacerbated by the use of AJAX.”]
Source: https://www.csoonline.com/article/2136907/xss–the-spark-to-the-ajax-dynamite.html