medium
Single Answer
0

An attacker posted a message to a public discussion forum that contains an embedded malicious script that is not displayed to the user but executes on the user's system when read. What type of attack is this?

Answer Options

A

Persistent XSRF

B

Nonpersistent XSRF

C

Persistent XSS

D

Nonpersistent XSS

Correct Answer: C

Explanation

Attacks where the malicious user tricks the victim's web browser into executing a script through the use of a third-party site are known as cross-site scripting (XSS) attacks. This particular attack is a persistent XSS attack because it remains on the discussion forum until an administrator discovers and deletes it, giving it the ability to affect many users.