Cross-Site Scripting Session Hijacking

A cross-site scripting session hijacking results from a hijacker locating a vulnerability on the website or web server.

In a successful cross-site scripting attack, the attacker will inject malcode into web pages.

The malcode will allow the hijacker to see the user’s session key in a man-in-the-middle attack and then steal the session.

Share