CAPEC-592 Stored XSS

abstraction: detailedstatus: active

An adversary utilizes a form of Cross-site Scripting (XSS) where a malicious script is persistently "stored" within the data storage of a vulnerable web application as valid input.

likelihood: Highseverity: Very High
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (11)

Related entries.

03

source

Where this definition is published.