Assertion: forged request | /r/CapableOf | exploit cross-site scripting
Facets:
value: at the target website
type: LOCATION
Source sentences:
text: The attack is blind: the attacker cannot see what the target website sends back to the victim in response to the forged requests, unless they exploit a cross-site scripting or other bug at the target website.