One involved a Wix website owner who is lured into visiting a malicious URL loaded with a specially crafted JavaScript that can hijack the target’s browser session.

An XSS vulnerability discovered on the Wix.com platform is putting millions of websites and their users at risk of attack. The website hosting provider, which provides free drag-and-drop website ...