A company runs a website that allows public posts. Recently, some users report that when visiting the website, pop-ups appear asking the users for their credentials. Which of the following is the most

The correct answer is D. XSS. Cross-Site Scripting (XSS) allows attackers to inject malicious scripts into web pages viewed by others. In this case, the pop-ups asking for credentials are likely the result of a script injected into a public post, a classic sign of XSS.

Submitted by khalil_dz· Mar 6, 2026Vulnerability Management

Question

A company runs a website that allows public posts. Recently, some users report that when visiting the website, pop-ups appear asking the users for their credentials. Which of the following is the most likely cause of this issue?

Options

ARootkit
BSQL injection
CCSRF
DXSS

How the community answered

(32 responses)

A
6% (2)
B
9% (3)
C
3% (1)
D
81% (26)

Explanation

Cross-Site Scripting (XSS) allows attackers to inject malicious scripts into web pages viewed by others. In this case, the pop-ups asking for credentials are likely the result of a script injected into a public post, a classic sign of XSS.

Topics

#XSS#web vulnerabilities#phishing#credential theft

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice