Exam 220-1102 topic 1 question 392 discussion

Cross-site scripting attacks, also called XSS attacks, are a type of injection attack that injects malicious code into otherwise safe websites. An attacker will use a flaw in a target web application to send some kind of malicious code, most commonly client-side JavaScript, to an end user.

C. XSS (Cross-Site Scripting) involves sending arbitrary characters in a web page request. XSS is a security vulnerability that allows an attacker to inject malicious scripts into a web page viewed by other users. These scripts can be used to steal information or perform other malicious actions when a user interacts with the compromised web page. It's a common attack vector used to send arbitrary characters and execute code within a web page context.