Skip to content

CompTIA PenTest+

CompTIA PenTest+ (PT0-003)

Attacks ExploitsEnglish

Practice session

A tester finds a search field that reflects user input directly into the HTML response without encoding, allowing `<script>alert(1)</script>` to execute only for the requesting user via a crafted link. Which XSS type is this?

Loading your practice session…