Skip to content

XSS.md

Latest commit

 

History

History
17 lines (13 loc) · 676 Bytes

XSS.md

File metadata and controls

17 lines (13 loc) · 676 Bytes
Raw

Cross-Site Scripting (XSS)

Vulnerability Overview

Cross-Site Scripting (XSS) vulnerability allows attackers to inject malicious scripts into Web sites, which can be executed with the users’ privilege.

Is This Identified as a Vulnerability?

Yes

Points That Need Protection Against This Vulnerability (Scope)

Anywhere users' input is placed as output

Exceptions (Cases Where This Is Not Identified as a Vulnerability)

Self-XSS is out of scope of this identification. Also, a case that we consider to have no impact is not identified as a vulnerability.

References

Cross-site Scripting (XSS)