I feel that it should have Feb. 2, 2000 - CERT publishes the first advisory about cross-site scripting https://web.archive.org/web/20000302105858/http://www.cert.o... (on the https://thehistoryoftheweb.com/timeline/?date_from=1997&date... page, of course)