🎁 New User? Get 20% off your first purchase with code NEWUSER20 · ⚡ Instant download · 🔒 Secure checkout Register Now →
Menu

Categories

Security Intermediate

What is XSS (Cross-Site Scripting)?

An attack that injects malicious scripts into web pages viewed by other users, potentially stealing data or session tokens.

XSS attacks inject JavaScript into web applications. Stored XSS persists in the database (e.g., in comments). Reflected XSS is embedded in URLs. DOM-based XSS manipulates the client-side document directly.

Prevention includes output encoding (HTML entities), Content Security Policy (CSP) headers, input validation, and using frameworks that auto-escape output. XSS can steal cookies, redirect users, or deface pages.

Related Terms

Zero Trust
A security model that requires strict identity verification for every user and device, regardless of their network location.
Brute Force Attack
An attack method that systematically tries all possible combinations of passwords or keys until the correct one is found.
Rate Limiting
A technique that controls the number of requests a client can make to a server within a specified time period.
API Security
Practices and mechanisms for protecting APIs from unauthorized access, data breaches, and abuse.
Two-Factor Authentication (2FA)
A security method requiring two different forms of identification before granting access to an account.
DDoS (Distributed Denial of Service)
An attack that floods a target server or network with traffic from multiple sources to overwhelm it and deny service to legitimate users.
 View All Security Terms →