XSS
Cross-Site Scripting
Cross-Site Scripting is a web vulnerability where an attacker injects malicious scripts into pages viewed by other users. XSS comes in three forms: reflected, stored, and DOM-based.
Cómo se usa en ciberseguridad
Penetration testers probe input fields, URL parameters, and headers to find XSS injection points in web applications. Security engineers implement output encoding and Content Security Policy headers to prevent XSS. SOC analysts monitor for XSS payloads in web application firewall logs.
Término relacionado en el glosario: cross site scripting
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.