Cross Site Scripting (XSS)
Attack
Read more Understanding what they are, how they work, and their risks
What is XSS?
XSS is a web vulnerability where attackers inject malicious scripts into trusted websites, targeting unsuspecting users.
How It Works
Attacker inserts malicious code into a web page.
User visits the infected page. The script executes in the user’s browser. Data, sessions, or accounts get compromised.
Types of XSS Attacks
Stored XSS: Malicious code saved on server. Reflected XSS: Code delivered via URL or request.
DOM-based XSS: Manipulates client-side scripts directly.
Impact of XSS
Theft of sensitive data (cookies, credentials).
Session hijacking & account takeover.
Malware distribution.
Loss of trust in your brand.
How to Prevent XSS
✅ Input validation & sanitization.
✅ Use Content Security Policy (CSP).
✅ Escape untrusted data in web pages.
✅ Regular vulnerability assessments.