Please enable JavaScript.

Coggle requires JavaScript to display documents.

xss (What is it? (Cross-Site Scripting (XSS) is a type of vulnerability…

- - - - Stored attacks are those where the injected script is permanently stored on the target servers
        
        Sometimes referred to as Persistent or Type-I XSS.
        
        Such as in a database, in a message forum, visitor log, comment field, etc
        
        The victim then retrieves the malicious script from the server when it requests the stored information.
    - - Reflected attacks are those where the injected script is reflected off the web server
        
        Sometimes referred to as Non-Persistent or Type-II XSS.
        
        Such as in an error message, search result, or any other response that includes some or all of the input sent to the server as part of the request.
        
        Reflected attacks are delivered to victims via another route, such as in an e-mail message, or on some other web site.
        
        When a user is tricked into clicking on a malicious link, submitting a specially crafted form, or even just browsing to a malicious site, the injected code travels to the vulnerable web site, which reflects the attack back to the user’s browser