Cross-Site Scripting

Overview

Cross-Site Scripting (XSS) is a vulnerability by which attackers inject client-side scripts into web pages viewed by other users. There are two primary flavors of XSS flaws: non-persistent and persistent.

Non-Persistent

A non-persistent (or reflected) XSS vulnerability is one in which data sent in an HTTP request is used immediately and unsafely within a server's response.

Persistent

A persistent (or stored) XSS vulnerability is one in which data included in an HTTP request is saved by the server and unsafely served to other users in the course of regular browsing.