Is this a valid XSS attack
xss
Solution
Yes, pretty much, consider if you have logged in, those script can also access your cookies and could send it to everywhere.
Problem
My understanding of XSS attacks focused on people entering malicious input via forms (persistant XSS attack). However I'm trying to understand non persistant. Is this as an example (obviously the alert could be substituted for something more sinister...) ``` http://localhost/MyProject/action.do?Title=<script>alert('XSS');</script> ```