The main risk to a web application in a cross site scripting attack is …
-
Compromise of users
-
Loss of data integrity
-
Destruction of data
-
None of the above
A
Correct answer
Explanation
The primary risk of XSS is compromising users' accounts and sessions by executing malicious scripts in their browsers. Attackers can steal session cookies, credentials, or perform actions on users' behalf. Data integrity (B) and destruction (C) are secondary concerns - the immediate target is the user's browser session, not the server's data directly.