PDF] A threat pattern for the cross-site scripting (XSS) attack

A threat pattern is presented that describes cross-site scripting (XSS) attacks, which describes how the attack is performed, which vulnerabilities it exploits, and how to stop it. We present a threat pattern that describes cross-site scripting (XSS) attacks. In this attack attackers insert scripts in web applications that will lead to misuses in a target web application. Cross-Site Scripting is listed as number three risk on the 2013 OWASP Top 10 list; it is an attack made possible due to the lack of user input validation or output escaping, which allows attackers to inject malicious code. The pattern describes how the attack is performed, which vulnerabilities it exploits, and how to stop it.

JCP, Free Full-Text

PDF) A Tutorial on Cross Site Scripting Attack - Defense

A hybrid XSS attack (HYXSSA) based on fusion approach: Challenges

PDF] A threat pattern for the cross-site scripting (XSS) attack

A novel technique to prevent SQL injection and cross-site

A REPORT ON CROSS-SITE SCRIPTING (XSS), by HarbSec

Cost-effective detection system of cross-site scripting attacks

Threat Modelling and Analysis of Web Application Attacks

What is Cross-site Scripting and How Can You Fix it?

What is Cross-Site Scripting (XSS)? How to Prevent and Fix It