XSS

Cross-Site Scripting (XSS)

Cross-Site Scripting is a web vulnerability where an attacker injects malicious scripts into pages viewed by other users. XSS comes in three forms: reflected, stored, and DOM-based.

Como é usado em cibersegurança

Penetration testers probe input fields, URL parameters, and headers to find XSS injection points in web applications. Security engineers implement output encoding and Content Security Policy headers to prevent XSS. SOC analysts monitor for XSS payloads in web application firewall logs.

Termo relacionado no glossário: cross site scripting

Última verificação: abril de 2026?Reportar uma imprecisão