Stored XSS WAHS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security tester is mapping an application's attack surface for Stored XSS. Which of the following input points is MOST likely to be a Stored XSS injection point?

   • AA URL parameter that controls the sort order of a table.
   • BA user profile 'bio' field that is saved and displayed on the user's public profile page.
   • CA search box that echoes the query in the results page.
   • DA login form's password field.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which testing technique is most effective for detecting a Stored XSS vulnerability in a comment field?

   • AUse a network scanner to identify open ports on the web server.
   • BSubmit a benign payload like <script>alert(1)</script> and then view the comment as another user to see if the script executes.
   • CCheck the server's HTTP response headers for the presence of a Content-Security-Policy header.
   • DSend a crafted URL with a payload to the server and observe the immediate response.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which sequence correctly describes the attack flow of Stored XSS?

   • AAttacker injects a payload into a database → the database executes the script directly → the script modifies server-side data.
   • BAttacker submits a payload to a vulnerable input field → server stores the payload → victim requests the page containing the stored data → server sends the payload to the victim's browser → browser executes the script.
   • CAttacker crafts a URL with a payload → victim clicks the URL → server reflects the payload in the response → victim's browser executes the script.
   • DAttacker sends a payload in an HTTP header → server logs the header → victim views the server logs → the log viewer executes the script.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An attacker exploits a Stored XSS vulnerability in a company's internal wiki. The payload executes when any employee views the affected page. Which consequence is MOST likely if the payload is designed to capture keystrokes?

   • AThe attacker can directly modify the wiki's database.
   • BThe attacker can install malware on the server.
   • CThe attacker can collect credentials and sensitive information typed by employees.
   • DThe attacker can cause a denial of service by flooding the network.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard · select all that apply

   A security team is hardening a web application against Stored XSS. Which of the following controls are effective in preventing or mitigating Stored XSS? Select all that apply.

   • AContext-aware output encoding for all user-generated content.
   • BInput validation that rejects or sanitizes dangerous characters on the server.
   • CUsing HTTPS to encrypt traffic between the client and server.
   • DA Content Security Policy that restricts script sources and blocks inline scripts.
   Check answers Discussion Select an answer first