Multiple choice technology security

An attack technique where a programming flaw allows an attacker to execute script in the victims's browser which can hijack user sessions, deface websites, possibly introduce worms, etc

  1. Broken authentication and Sesion Management

  2. Cross Site Request Forgery (CSRF)

  3. SQL Injection

  4. Cross Site Scripting (XSS)

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Cross-Site Scripting (XSS) occurs when vulnerable code executes malicious scripts in a victim's browser, enabling attackers to hijack sessions, deface sites, or distribute malware. SQL Injection targets databases, while CSRF triggers unauthorized actions, and broken session management exposes user tokens.