PWPA

TCM Security Practical Web Pentest Associate (PWPA)

Injection VulnerabilitiesEnglish
Exam overview

Practice session

A web application reflects user input in the page without encoding it. An attacker crafts the URL: `?name=<script>alert(1)</script>`. What type of XSS is this?

Loading your practice session…