200-201 · Question #317
Which classification of cross-site scripting attack executes the payload without storing it for repeated use?
The correct answer is B. reflective. Reflective cross-site scripting (XSS) attacks occur when the malicious script is immediately reflected off a web application to the user and executed. In this type of attack, the payload is not stored persistently on the target server. Instead, it is typically embedded in a URL…
Question
Which classification of cross-site scripting attack executes the payload without storing it for repeated use?
Options
- ACSRF
- Breflective
- CDOM
- Dstored
How the community answered
(35 responses)- A6% (2)
- B91% (32)
- C3% (1)
Explanation
Reflective cross-site scripting (XSS) attacks occur when the malicious script is immediately reflected off a web application to the user and executed. In this type of attack, the payload is not stored persistently on the target server. Instead, it is typically embedded in a URL or input field, and when the victim visits a crafted link or submits a form, the payload is reflected back in the response, allowing the attacker to execute the script within the user's browser.
Topics
Community Discussion
No community discussion yet for this question.