nerdexam
GIAC

GWAPT · Question #4

You discover that a web application reflects user input in the URL. How can you confirm a Reflected XSS vulnerability?

The correct answer is A. Inject <script>alert('XSS')</script> in the URL and observe browser behavior. See the full explanation below for the reasoning.

Question

You discover that a web application reflects user input in the URL. How can you confirm a Reflected XSS vulnerability?

Options

  • AInject <script>alert('XSS')</script> in the URL and observe browser behavior
  • BPerform SQL injection tests
  • CReboot the web server
  • DTest all API endpoints

How the community answered

(31 responses)
  • A
    84% (26)
  • B
    3% (1)
  • C
    10% (3)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GWAPT Practice