What type of attack involves injecting malicious code into a website to hijack a session cookie?Cross-site scripting (XSS) attacksPassword attacksPing flood attacksSQL injections

Which web attack is a server-side attack? Clickjacking Cross-site request forgery SQL injection Cross-site scripting

Which of the following is a common vulnerability in web applications? Cross-site scripting (XSS) Cross-site request forgery (CSRF) SQL injection All of the above

What is the term used to describe a vulnerability in a web application that allows an attacker to execute malicious scripts on a user's browser? Cross-site scripting SQL injection Buffer overflow Denial-of-service

Question 8What is Cross-Site Scripting (XSS) attack?1 pointAn attack where the attacker intercepts and modifies data between two parties.An attack where the attacker gains access to a user's password.An attack where the attacker injects malicious scripts into a web page viewed by other users.An attack where the attacker gains access to a user's computer by exploiting a vulnerability in a software application.

Cross-site scripting (XSS) attacks are often delivered by exploiting which of the following languages? Select two answers.