Which outcome is a likely result if a site is vulnerable to cross-site scripting?

Which outcome is a likely result if a site is vulnerable to cross-site scripting?

• A. Access the user's data
• B. Steal server configuration
• C. Change database schemas
• D. Disable user accounts

Answer: (A)

Cross-site scripting lets an attacker run malicious code in the victim’s browser. That code can read data that the page exposes or stores in the browser, such as session cookies, tokens, or information the user has entered into forms. With access to these client-side data, an attacker can impersonate the user or steal sensitive details, which is why accessing the user’s data is the most likely outcome of an XSS vulnerability. The other options involve server-side access or administrative controls, which XSS doesn’t directly grant just by injecting scripts into a page.

Cross-site scripting lets an attacker run malicious code in the victim’s browser. That code can read data that the page exposes or stores in the browser, such as session cookies, tokens, or information the user has entered into forms. With access to these client-side data, an attacker can impersonate the user or steal sensitive details, which is why accessing the user’s data is the most likely outcome of an XSS vulnerability. The other options involve server-side access or administrative controls, which XSS doesn’t directly grant just by injecting scripts into a page.