<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>XSS on ku5e | Cybersecurity Portfolio</title><link>https://ku5e.com/tags/xss/</link><description>Recent content in XSS on ku5e | Cybersecurity Portfolio</description><generator>Hugo -- 0.162.1</generator><language>en-us</language><lastBuildDate>Wed, 22 Apr 2026 19:22:00 +0000</lastBuildDate><atom:link href="https://ku5e.com/tags/xss/index.xml" rel="self" type="application/rss+xml"/><item><title>Zero-Click Prompt Injection in Claude's Chrome Extension: One Iframe, No Warning, Everything Gone</title><link>https://ku5e.com/blog/zero-click-prompt-injection-in-claude-s-chrome-extension-one-iframe-no-warning-everything-gone/</link><pubDate>Wed, 22 Apr 2026 19:22:00 +0000</pubDate><guid>https://ku5e.com/blog/zero-click-prompt-injection-in-claude-s-chrome-extension-one-iframe-no-warning-everything-gone/</guid><description>ku5e.com blog article on the zero-click prompt injection vulnerability in Claude&amp;#39;s official Chrome extension — patched in v1.0.41.</description></item></channel></rss>