nerdexam
EC-Council

312-50V13 · Question #551

Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.

The correct answer is B. Cross-Site Scripting (XSS). Cross-Site Scripting (XSS) is a web application attack where attackers inject malicious client-side scripts into web pages, which are then executed in the browsers of other unsuspecting users.

Submitted by haruto_sh· Mar 6, 2026Hacking Web Applications

Question

Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.

Options

  • ASQL injection attack
  • BCross-Site Scripting (XSS)
  • CLDAP Injection attack
  • DCross-Site Request Forgery (CSRF)

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    92% (45)
  • C
    4% (2)
  • D
    2% (1)

Why each option

Cross-Site Scripting (XSS) is a web application attack where attackers inject malicious client-side scripts into web pages, which are then executed in the browsers of other unsuspecting users.

ASQL injection attack

SQL injection attacks target databases by inserting malicious SQL code into input fields to manipulate or extract data.

BCross-Site Scripting (XSS)Correct

Cross-Site Scripting (XSS) attacks specifically involve injecting malicious client-side scripts (often JavaScript) into legitimate web pages, which are then delivered to and executed by other users' web browsers, enabling various malicious activities.

CLDAP Injection attack

LDAP Injection attacks involve manipulating LDAP statements to query or modify LDAP directory services.

DCross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) attacks trick authenticated users into unwittingly executing unwanted actions on a web application by forging requests.

Concept tested: Cross-Site Scripting (XSS) attack

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/xss-vulnerabilities

Topics

#web application attack#Cross-Site Scripting#client-side script injection#XSS

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice