cross-site scripting (xss) via file upload
Cross-site scripting (XSS) via file upload refers to a security vulnerability where an attacker exploits a web application's file upload functionality to inject and execute malicious code on a different website or a user's browser. The attacker uploads a file containing malicious script code, which is then executed on the target site, potentially allowing them to steal sensitive information or gain unauthorized access.
Requires login.
Related Concepts (1)
Similar Concepts
- cross-domain scripting
- cross-site request forgery (csrf)
- cross-site request forgery (csrf) attacks
- cross-site request forgery (csrf) vulnerabilities
- cross-site script inclusion (xssi)
- cross-site scripting
- cross-site scripting (xss)
- cross-site scripting (xss) attacks
- cross-site scripting (xss) authentication bypass
- cross-site scripting (xss) payload generation
- cross-site scripting (xss) prevention
- cross-site scripting (xss) vulnerabilities
- csrf attacks targeting file upload functionalities
- server-side request forgery (ssrf) via file upload
- server-side scripting vulnerabilities