Threats & AttacksQuestion 20 of 100
A malicious script stored on a vulnerable web page runs in other users' browsers when they view it. This is:
a.SQL injection
b.CSRF
c.Stored cross-site scripting
d.Clickjacking
Explanation
Stored cross-site scripting (XSS) persists malicious script on the server so it executes in every visitor's browser. It can steal session tokens or perform actions as the victim. Output encoding and input validation prevent XSS.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which type of malware hides deep in the operating system to conceal its presence and maintain privileged access?
- A phishing attack that specifically targets a high-value executive is known as:
- Which attack intercepts and possibly alters communication between two parties who believe they are talking directly?
- Which term describes exploiting a time gap between checking a resource and using it?
- An attacker follows an employee through a secured door without badging in. This physical attack is called:
- Which attack precomputes hashes to reverse password hashes quickly?
Last reviewed: · editorial process
Sen Lin, PrepPass Founder · Verified against CompTIA Security+ (SY0-701) · How we review