XSS

Injecting script into a page other users view; CSP and output escaping are the main defences.

Check whether your site applies it

VulScan Pro checks XSS automatically and shows the raw evidence.

Run a free audit

Other terms