The best way to discover cross-site scripting is by using a professional web vulnerability scanner based on an advanced crawling and scanning engine. Acunetix is the industry leader in discovering XSS, including the difficult-to-detect DOM-based XSS.
See what Acunetix Premium can do for you.