Cross-Site Scripting (XSS) — Roadmap Step & Resources
Injecting malicious scripts that execute in another user's browser
- Level: intermediate
- Estimated time: 2 days
- Roadmap: Cybersecurity Analyst / Ethical Hacker
Before this step
Interview questions
- What's the difference between stored, reflected and DOM-based XSS?
Study resources
- Cross-Site Scripting (XSS) (Article) — PortSwigger's Web Security Academy definitive guide to XSS, with free interactive labs.
- XSS Explained (Video) — A practical explanation of stored, reflected and DOM-based XSS.
- Cross-Site Scripting (XSS) Cheat Sheet (Article) — OWASP's own official cheat sheet on preventing XSS vulnerabilities.
Part of
- Web Application Security — section
- Cybersecurity Analyst / Ethical Hacker roadmap — the full learning path