CS Fundamentals Trainer · JavaScript · Security
A search page's server reads the q query parameter and writes it unescaped into the HTML response as You searched for: .... An attacker…
A search page's server reads the `q` query parameter and writes it unescaped into the HTML response as `You searched for: ...`. An attacker emails victims a crafted search link. Which kind of XSS is this?
- Stored XSS
- DOM-based XSS
- Reflected XSS
- Self-XSS
Difficulty: easy