XSS

XSS attacks belong to the injection category of web application attacks. They are mainly caused by not sanitizing the user input that is passed to the web application from the end user. This does not lead to the server being compromised, but the implications are very serious in terms of the user's data being compromised. Attacks happen when an attacker is able to inject some sort of Java script or HTML content into the web page that will be served to the user. This malicious content may attempt to steal sensitive information from the user visiting the website. In the following sections, we will take a look at different types of XSS attacks.

Stored or Type 1 XSS attacks

Stored XSS are attacks in which the supplied...