cid f5d194a8f215da970bd10f706532f211386c17f7e5ceb54d608b43148f729d80 · original · open access · via wikipedia
Title: Cross-site scripting Authors: Venue: Wikipedia Year: unknown Canonical: wiki:cross-site-scripting URL: https://en.wikipedia.org/wiki/Cross-site_scripting Collector: wikipedia OA: true ABSTRACT Cross-site scripting (XSS) is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy. XSS effects vary in range from petty nuisance to significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner network.