Multiple choice

Which of the following is/are correct about Cross-site scripting (XSS) in web application security?

  1. Cross-site scripting vulnerability may be used by attackers to bypass access controls.

  2. The non-persistent XSS is used to provide data by a web client, most commonly in HTTP query parameters or in HTML form submissions.

  3. XSS makes enable attackers to inject client-side script into Web pages viewed by other users.

  4. All of the above

  5. Both (2) and (3)

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

These are the correct statements about XSS (Cross Side Scripting).