The security team reviews a web server for XSS and runs the following Nmap scan: Which of the following most accurately describes the result of the scan?

The correct answer is B. The vulnerable parameter ID and unfiltered characters returned. The Nmap http-unsafe-output-escaping script reports that the id parameter is reflecting the characters > and " without filtering, indicating a potential XSS weakness in that parameter.

Submitted by kev92· Mar 6, 2026Vulnerability Management

Question

The security team reviews a web server for XSS and runs the following Nmap scan:

Which of the following most accurately describes the result of the scan?

Exhibit

Options

AAn output of characters > and " as the parameters used in the attempt
BThe vulnerable parameter ID and unfiltered characters returned
CThe vulnerable parameter and unfiltered or encoded characters passed > and " as unsafe
DThe vulnerable parameter ID with a SQL Injection attempt

How the community answered

(27 responses)

B
85% (23)
C
11% (3)
D
4% (1)

Explanation

The Nmap http-unsafe-output-escaping script reports that the id parameter is reflecting the characters > and " without filtering, indicating a potential XSS weakness in that parameter.

Topics

#XSS#Nmap#vulnerability scanning#web application security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice