Solved

Question of the day 12/09, Cybersecurity Edition

  • 12 September 2022
  • 7 comments
  • 65 views

Userlevel 7
Badge +13

Day 10

You are moderator of a Wordpress site. It’s monday morning and you had already a cup of coffee. While checking comments on site posted in the previous weekend, you found a plaintext transformed code.

<img src=x onerror="alert(1)" />

What type of attack was tried to check?

  • Path traversal
  • Banner grabbing
  • Subdomain scanning
  • Cross-site scripting
  • SOAP api
icon

Best answer by mkevenaar 12 September 2022, 09:00

View original

7 comments

Userlevel 7
Badge +14

Cross site scripting 

Userlevel 7
Badge +7

Cross-site scripting

Userlevel 7
Badge +17

Cross-site scripting  😎

Userlevel 7
Badge +20

Cross-site scripting

Userlevel 7
Badge +11

It sounds like CSS (Cross-site scripting) attack.

Userlevel 7
Badge +13

XSS was the correct answer: XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users (stored xss) or by attacker itself (reflecterd XSS)

Userlevel 7
Badge +14

I just found a real life example on this community:

 


I already reported this user to @Madi.Cristil 

Comment