Reflected XSS WAHS Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A web application reflects user input in HTML content without sanitization, leading to a reflected XSS vulnerability. Which mitigation is most effective to prevent this vulnerability?

   • ARemove all user input fields from the application.
   • BApply context-aware output encoding on all user-controlled data before rendering.
   • CDisable JavaScript in the user's browser.
   • DUse a Web Application Firewall (WAF) as the sole defense.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the first step in manually testing a web application for reflected XSS?

   • AImmediately inject a full script payload like <script>alert(1)</script>.
   • BIdentify input vectors that are reflected in the response.
   • CCheck the server's HTTP headers for security misconfigurations.
   • DUse a vulnerability scanner to automatically detect all XSS.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security analyst discovers that a web application reflects a 'redirect' parameter in a 302 response without validation. An attacker crafts a URL that causes the victim's browser to redirect to a phishing site that mimics the login page. Which impact is the attacker most directly achieving?

   • ADenial of service by making the application unresponsive to legitimate users.
   • BPrivilege escalation by modifying the victim's account permissions.
   • CSession hijacking by stealing the victim's session cookie via JavaScript.
   • DCredential theft via a phishing page that appears to be the legitimate site.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security tester is using an automated scanner to detect reflected XSS in a web application. The scanner injects a payload into a parameter and checks if the payload appears in the response. However, the scanner reports no vulnerabilities, but manual testing confirms a reflected XSS exists. What is the most likely reason for the scanner's failure?

   • AThe scanner's payloads are not tailored to the specific reflection context, such as an attribute or JavaScript context.
   • BThe scanner is using a blacklist-based detection that is bypassed by the application's WAF.
   • CThe scanner is not configured to send cookies, so it cannot authenticate to the application.
   • DThe scanner is only testing GET parameters, but the vulnerability is in a POST parameter.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security analyst is reviewing a web application that displays a user's search query in the page heading after a search. The analyst notices that the query is reflected without any sanitization. Which characteristic best identifies this as reflected XSS rather than stored XSS?

   • AThe payload executes only after the user interacts with a DOM event such as onclick.
   • BThe payload is delivered via a crafted URL and is not persisted on the server.
   • CThe payload is injected through HTTP headers and reflected in the response body.
   • DThe payload is stored in a database and executed for every user who views the page.
   Reveal Solution Discussion Select an answer first