Stored XSS WAHS Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a common injection point for Stored XSS?

   • AHTTP request headers such as User-Agent
   • BA comment section on a blog post
   • CA URL query parameter used in a search function
   • DA JavaScript variable in the page's source code
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In a Stored XSS attack, why does the malicious script execute for every user who views the affected page?

   • ABecause the server stores the payload and includes it in the response for every request to that page.
   • BBecause the script is embedded in the page's JavaScript file that is cached by the browser.
   • CBecause the attacker's script is injected into the browser's local storage and runs on every page visit.
   • DBecause the script is placed in the URL and the server redirects all users to that URL.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   When testing for Stored XSS in a user profile field, what should a tester do after submitting a payload?

   • ARestart the web server to see if the payload is cleared.
   • BImmediately check the HTTP response of the submission request for the payload being reflected.
   • CLog out and log back in as the same user to see if the payload persists.
   • DAccess the profile page from a different user account or an incognito session to see if the payload executes.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security architect is designing a defense-in-depth strategy for a web application that has a stored XSS vulnerability in a rich-text editor. The editor allows users to submit formatted content that is stored and rendered for other users. The architect must balance security with functionality. Which approach is most effective?

   • AUse an allowlist-based sanitizer on the server to permit only safe HTML tags and attributes, and encode all output.
   • BRely on the browser's built-in XSS auditor to block malicious scripts.
   • CUse a blacklist to remove known malicious tags like <script> and <iframe>.
   • DDisable the rich-text editor and replace it with a plain text field.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security team discovers a Stored XSS vulnerability in a customer support portal. The portal is used by both customers and internal agents. The payload steals session cookies and sends them to an attacker-controlled server. Which factor makes this vulnerability especially severe?

   • AThe payload executes for every user who views the affected page, including agents with elevated privileges.
   • BThe payload is delivered via a phishing email, making it difficult to detect.
   • CThe payload is stored in the database, so it can be deleted by the administrator.
   • DThe payload only affects the attacker's browser, so it is low risk.
   Reveal Solution Discussion Select an answer first