Which term describes injecting client-side scripts into web pages viewed by other users?

Which term describes injecting client-side scripts into web pages viewed by other users?

• A. Cross-Site Scripting (XSS)
• B. SQL Injection
• C. Cross-Site Request Forgery
• D. Clickjacking

Answer: (A)

Cross-Site Scripting describes injecting client-side scripts into web pages that other users view. When the malicious script runs in a victim’s browser, it has access to the page’s context and can read cookies, session tokens, or perform actions on behalf of the user, potentially leading to hijacked sessions or stolen credentials. This behavior is distinct from SQL injection, which targets server-side database queries by injecting malicious SQL; from Cross-Site Request Forgery, which tricks a user into unknowingly submitting a request; and from Clickjacking, which overlays a page to mislead a user into clicking something unintended. A classic example is when harmful script is stored in a site’s comment or profile field and then executed for anyone who views that page.

Cross-Site Scripting describes injecting client-side scripts into web pages that other users view. When the malicious script runs in a victim’s browser, it has access to the page’s context and can read cookies, session tokens, or perform actions on behalf of the user, potentially leading to hijacked sessions or stolen credentials. This behavior is distinct from SQL injection, which targets server-side database queries by injecting malicious SQL; from Cross-Site Request Forgery, which tricks a user into unknowingly submitting a request; and from Clickjacking, which overlays a page to mislead a user into clicking something unintended. A classic example is when harmful script is stored in a site’s comment or profile field and then executed for anyone who views that page.