nerdexam
EC-Council

312-49 · Question #653

Which of the following attack uses HTML tags like <script></script>?

The correct answer is B. XSS attack. Cross-Site Scripting (XSS) attacks inject malicious client-side scripts into web pages viewed by other users. The <script></script> HTML tag is the primary vehicle for these injections, allowing attackers to execute arbitrary JavaScript in a victim's browser to steal cookies, red

Submitted by marco_it· Apr 18, 2026Computer Forensics in Today's World

Question

Which of the following attack uses HTML tags like <script></script>?

Options

  • APhishing
  • BXSS attack
  • CSQL injection
  • DSpam

How the community answered

(39 responses)
  • A
    5% (2)
  • B
    92% (36)
  • C
    3% (1)

Explanation

Cross-Site Scripting (XSS) attacks inject malicious client-side scripts into web pages viewed by other users. The <script></script> HTML tag is the primary vehicle for these injections, allowing attackers to execute arbitrary JavaScript in a victim's browser to steal cookies, redirect users, or perform actions on their behalf. SQL injection targets database query logic using SQL syntax. Phishing uses social engineering and deceptive web pages rather than script injection. Spam involves unsolicited messages and does not rely on script tag injection. XSS is the definitive attack type associated with <script> tag abuse.

Topics

#XSS#Web Application Security#HTML Scripting#Vulnerability

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice