A cross-site scripting vulnerability can occur when
A) Files are accepted as input without verifying their specifications
B) Input from other users is supplied as output to other users
C) A program puts more data into a storage location than it can hold
D) User input is used without confirming its validity

Question

Quizplus · Accepted Answer

In a cross-site scripting vulnerability, input from one user is supplied as output to another user, allowing the attacker to inject malicious code that can be executed by unsuspecting users. This occurs when a website does not properly sanitize user input before displaying it to other users, leading to the vulnerability. Files (A) and storage limitations (C) are not directly related to cross-site scripting vulnerabilities, although they may lead to other security issues. Validating user input (D) is an important security measure but may not necessarily prevent cross-site scripting vulnerabilities.

A Cross-Site Scripting Vulnerability Can Occur When