Stored XSS WAHS Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A QA tester is asked to verify whether a new message board feature is vulnerable to Stored XSS. Which testing approach is MOST effective?

   • APost a message containing a benign script that sets a JavaScript variable, then view the message in a different browser session.
   • BCheck the server logs for any script tags in requests.
   • CSend a crafted URL with a script to the server and observe the HTTP response.
   • DUse a web vulnerability scanner that only tests URL parameters.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a potential impact of Stored XSS on a web application?

   • AThe attacker can crash the web server by sending a malformed HTTP request.
   • BThe attacker can read the server's environment variables directly from the browser.
   • CThe attacker can steal session cookies of any user who views the affected page.
   • DThe attacker can directly modify the server's database schema.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A development team is fixing a stored XSS vulnerability in a user profile field. The field accepts a short bio that is displayed on the user's public profile page. The team wants to prevent malicious scripts from executing while allowing users to include basic formatting like bold text. Which mitigation is most effective?

   • AApply output encoding when rendering the bio field, and use a Content Security Policy that blocks inline scripts.
   • BUse HTTPS to encrypt the bio data in transit.
   • CRemove all HTML tags from the bio before storing it in the database.
   • DLimit the bio field to a maximum length of 200 characters.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A penetration tester is mapping the attack surface of a web application. Which of the following is the most likely injection point for a stored XSS attack?

   • AA search box that echoes the query in the results page.
   • BA user profile 'About Me' field that is displayed on the public profile page.
   • CA URL parameter that controls the sort order of a table.
   • DA cookie that stores the user's theme preference.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which application feature is most likely to be vulnerable to Stored XSS if user input is not properly sanitized?

   • AA user profile page that displays the user's 'About Me' text
   • BA CAPTCHA verification widget
   • CA login form that shows an error message for invalid credentials
   • DA password reset form that sends a one-time link via email
   Reveal Solution Discussion Select an answer first