Professional 1.6.11
Summary: PortSwigger released Burp Suite Professional 1.6.11 on 17 February 2015, adding a new Scanner check for path-relative style sheet import (PRSSI) vulnerabilities, sometimes called relative path overwrite. The release states the key prerequisite - a CSS import directive using a path-relative URL - is common and seemingly innocuous, that real vulnerabilities are prevalent in the wild, and that impact is in many cases serious and equivalent to cross-site scripting.
Why it matters: PRSSI was not widely understood by testers or developers at the time, and the trigger is a CSS import directive that appears harmless and shows up frequently - so the exposure sits in code most teams never thought to review.
Read the original at PortSwigger Research ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026