H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

This type of attack is a form of Cross-Site Scripting (XSS) where a malicious script is "reflected" off a vulnerable web application and then executed by a victim's browser. The process starts with an adversary delivering a malicious script to a victim and convincing the victim to send the script to the vulnerable web application.

Labels

attack-patterncapec
43 recorded

Relationships

child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
child-ofTechnique
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
1 external

References

capec
CAPEC-591
open