Cross site scripting (XSS)
Also called: XSS
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
An attack that injects malicious code into a website so the user's browser runs it; Type I is reflected (in a link) and Type II is stored (posted on the site).
Appears in the course and exam description (CED): 5.1.B.55.1.B.65.6.E.2
Why it matters in Unit 5
The code runs in visitors’ browsers and can reach usernames, passwords and keys stored there.
Example
A forum post containing a script tag that runs for every visitor.
Learn it properly, with a checkpoint 5.1 Application and Data Vulnerabilities and Attacks