At what layer does a cross site scripting attack occur on?

The correct answer is B. Application. Cross-site scripting (XSS) attacks occur at the Application layer (Layer 7 of the OSI model). XSS exploits vulnerabilities in web applications by injecting malicious scripts into web pages that are then executed in a victim's browser. Because the attack targets the web…

Submitted by chen.hong· Apr 18, 2026Network Forensics

Question

Options

APresentation
BApplication
CSession
DData Link

How the community answered

(38 responses)

A
3% (1)
B
89% (34)
C
3% (1)
D
5% (2)

Explanation

Cross-site scripting (XSS) attacks occur at the Application layer (Layer 7 of the OSI model). XSS exploits vulnerabilities in web applications by injecting malicious scripts into web pages that are then executed in a victim's browser. Because the attack targets the web application itself-manipulating how it processes and outputs user-supplied data-it is fundamentally an application-layer attack, not a lower-level network or data-link attack.

Topics

#Cross-Site Scripting (XSS)#OSI Model#Application Layer#Web Application Attacks

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice