NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ25

VerifiedWeb application and API security with botnet mitigation

While reviewing a report from your FortiWeb logs, you notice a JavaScript payload such as <script>document.cookie</script> submitted through a product review form. The page does not filter the script, and users who view the review have their session cookies exposed.

Which type of attack does this scenario describe?

Explanation

Cross-site scripting (XSS) occurs when attacker-controlled script is accepted and later executed in other users’ browsers. An unfiltered script submitted in a review that exposes viewers’ session cookies is stored XSS.

Community Discussion

No comments yet. Be the first to start the discussion!