"Yes Cross Site Scripting (XSS) errors are all over the place. And YES they can affect very prominent web sites.

The discussion forum area on Barackobama.com is allegedly the victim of a XSS exploit that redirected comments from Obama's site to....HillaryClinton.com.

A hacker going by the alias of 'Mox' has claimed responsibility for the exploit. Mox argued that the Obama site was not 'hacked'.

It is because what I did was not hacking in the sense that I burrowed into some dusty served and changed the Obama site and stole all your credit card numbers. All I did was exploit some poorly written HTML code."

Article Link: http://blog.internetnews.com/skerner/2008/04/hackers-take-from-barack-obama.html