ECSS: EC-Council Certified Security Specialist

By ECCouncil · Question Mode

QuestionQ4

VerifiedInformation Security Threats and Attacks

Which attack enables attackers to bypass client-ID security mechanisms, obtain access privileges, and inject malicious scripts into particular web pages?

Explanation

Cross-Site Scripting (XSS) injects attacker-controlled script into a web page. When the script executes in a victim’s browser, it can act in that user’s authenticated context and bypass or undermine client-side security controls.

Community Discussion

No comments yet. Be the first to start the discussion!