Question

This attack can be deployed by infusing a malicious code in a website’s comment section. What is “this” attack referred to here?

(a) SQL injection

(b) HTML Injection

(c) Cross Site Scripting (XSS)

(d) Cross Site Request Forgery (XSRF)

The question was asked in an online interview.

I'd like to ask this question from Cyber Attacks Types in portion Cyber Security of Cyber Security

Answer 1

Right option is (c) Cross Site Scripting (XSS)

Explanation: XSS attack can be infused by putting the malicious code (which gets automatically run) in any comment section or feedback section of any webpage (usually a blogging page). This can hamper the reputation of a site and the attacker may place any private data or personal credentials.