ASecurityAcademy

Cross-Site Scripting (XSS)

A flaw where user input is placed into a page without encoding, so attacker-supplied JavaScript runs in other users' browsers.

Learn it hands-on