eWPT

Practice session

A tester discovers that a web application reflects user input directly in a script block without encoding: `<script>var user='PAYLOAD';</script>`. Which type of XSS vulnerability is this?

Loading your practice session…