Exam 312-39 topic 1 question 52 discussion

The answer is A. Pag 116

In this attack, an attacker injects malicious code (in this case, a script that displays an alert) into a vulnerable web application

The scenario described in the question demonstrates a Cross-site Scripting (XSS) attack. In this attack, an attacker injects malicious code (in this case, a script that displays an alert) into a vulnerable web application, typically by exploiting input validation or output encoding weaknesses.

I believe the correct answer is A. Cross Site Scripting attack. In the example, the attacker is injecting javascript into the URL to create a pop-up warning. In a session attack, the attacker sniffs or otherwise acquires a legit session ID and uses it to gain access to a server, which is not mentioned here. Examples of both are on the OWASP website at the following link. https://owasp.org/www-community/attacks/Session_hijacking_attack