Web Security · Junior · Question 17 of 75

What is stored XSS?

✓Correct answer: The malicious script is saved on the server, for example in a comment, and served to everyone who views it
2The script is hidden in a CSS file
3The script is stored in the attacker's own localStorage

Explanation

Stored XSS is especially dangerous because victims only need to open a normal page, and it can affect many users at once.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.