Which of the following allows an attacker to enter malicious data into a Website?

Question

Options

• ACross site scripting
• BInline scripting
• CWindows PowerShell scripting
• DClient-side scripting

• A
  78% (43)
• B
  2% (1)
• C
  7% (4)
• D
  13% (7)

Explanation

Cross-Site Scripting (XSS) is the correct answer because it is a well-documented attack vector where an attacker injects malicious scripts (typically JavaScript) into a trusted website's input fields - such as comment boxes, search bars, or forms - which then execute in other users' browsers, potentially stealing cookies, session tokens, or redirecting users.

Why the distractors are wrong:

• B. Inline scripting is a legitimate HTML/CSS technique (e.g., <script> tags or style attributes) and describes where code runs, not an attack method.
• C. Windows PowerShell scripting is a local system administration tool and has no direct role in web-based input attacks.
• D. Client-side scripting is a broad term for scripts that run in the browser (like JavaScript) - it's the mechanism XSS exploits, not the attack itself.

Memory tip: Think XSS = eXtra Sneaky Script - an attacker crosses the trust boundary between your site and its users by sneaking malicious code through input fields.

No community discussion yet for this question.