CISSP Cross-Site Scripting – Bk1D3T6St7
Cross-site scripting (XSS) occurs when an attacker is able to fool a web application into interpreting data as browser scripting code. Cross-site scripting (XSS) is a form of an injection attack but sufficiently prevalent to warrant being discussed separately. There are several types of XSS attacks, the most common being the stored and the reflected XSS attacks. In the stored XSS attack, the threat actor manages to store a script in the server’s database (e.g. …