English to Romanian Other Other IT, website

XSS (Cross-Site-Scripting) is one of the most popular attacks on web-applications as it can be used for phishing in more than one way. For starters, an attacker can add a malicious JavaScript to the website URL to redirect users to a phishing page. Exploiting XSS, the attacker can also embed the phishing page right onto the website or provide content injections. In case of the latter, malicious data is injected into the legitimate content, and users think it trustworthy. This could easily be a web-form that asks for login credentials – which will end up in the hands of the attacker.