medium
Single Answer
0Melania is reviewing posts to a user forum on her company's website, and when she browses a certain post, a message pops up in a dialog box on her screen reading “Alert.” She reviews the source code for the post and finds the following code snippet: <script>alert(‘Alert’);</script> What vulnerability definitely exists on Melania's message board?
Answer Options
A
Cross-site scripting
B
Cross-site request forgery
C
SQL injection
D
Improper authentication
Correct Answer: A
Explanation
The message board is clearly susceptible to a cross-site scripting (XSS) attack. The code that Melania discovered in the message is a definitive example of an attempt to conduct cross-site scripting, and the alert box that she received demonstrates that the vulnerability exists. The website may also be vulnerable to cross-site request forgery, SQL injection, improper authentication, and other attacks, but there is no evidence of this provided in the scenario.