How is a cross-site scripting attack executed?

The correct answer is B. Execute malicious client-side scripts injected to a client via a web app. A cross-site scripting (XSS) attack involves injecting malicious client-side scripts into a web application, which are then delivered to other users. When a victim accesses the infected web page, the malicious scripts execute in their browser, potentially allowing the attacker…

Submitted by mateo_ar· Mar 30, 2026Security Concepts

Question

Options

AForce a currently authenticated end user to execute unwanted actions on a web app
BExecute malicious client-side scripts injected to a client via a web app
CInject a database query via the input data from the client to a web app
DIntercept communications between a client and a web server

How the community answered

(46 responses)

A
2% (1)
B
89% (41)
C
7% (3)
D
2% (1)

Explanation

A cross-site scripting (XSS) attack involves injecting malicious client-side scripts into a web application, which are then delivered to other users. When a victim accesses the infected web page, the malicious scripts execute in their browser, potentially allowing the attacker to steal cookies, session tokens, or other sensitive information.

Topics

#cross-site scripting#XSS#client-side injection#web vulnerabilities

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice