H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

Stored XSS

An adversary utilizes a form of Cross-site Scripting (XSS) where a malicious script is persistently "stored" within the data storage of a vulnerable web application as valid input.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An adversary utilizes a form of Cross-site Scripting (XSS) where a malicious script is persistently "stored" within the data storage of a vulnerable web application as valid input.

Labels

attack-patterncapec
44 recorded

Relationships

child-of
to Cross-Site Scripting (XSS)
Technique
child-of
from XSS Targeting Error Pages
Technique
child-of
from XSS Targeting HTML Attributes
Technique
child-of
from XSS Targeting Non-Script Elements
Technique
child-of
from XSS Targeting URI Placeholders
Technique
child-of
from XSS Through HTTP Headers
Technique
child-of
from XSS Through HTTP Query Strings
Technique
child-of
from XSS Using Alternate Syntax
Technique
child-of
from XSS Using Doubled Characters
Technique
child-of
from XSS Using Invalid Characters
Technique
child-of
from XSS Using MIME Type Mismatch
Technique
related-to
from CVE-2012-0767
Vulnerability
related-to
from CVE-2013-5223
Vulnerability
related-to
from CVE-2014-2120
Vulnerability
related-to
from CVE-2018-19943
Vulnerability
related-to
from CVE-2018-19953
Vulnerability
related-to
from CVE-2018-6882
Vulnerability
related-to
from CVE-2019-18426
Vulnerability
related-to
from CVE-2019-3929
Vulnerability
related-to
from CVE-2019-9978
Vulnerability
related-to
from CVE-2020-11023
Vulnerability
related-to
from CVE-2020-35730
Vulnerability
related-to
from CVE-2020-3580
Vulnerability
related-to
from CVE-2021-1879
Vulnerability
related-to
from CVE-2021-26829
Vulnerability
related-to
from CVE-2022-24682
Vulnerability
related-to
from CVE-2022-27926
Vulnerability
related-to
from CVE-2022-39197
Vulnerability
related-to
from CVE-2022-42948
Vulnerability
related-to
from CVE-2023-34192
Vulnerability
related-to
from CVE-2023-37580
Vulnerability
related-to
from CVE-2023-43770
Vulnerability
related-to
from CVE-2023-5631
Vulnerability
related-to
from CVE-2024-11182
Vulnerability
related-to
from CVE-2024-27443
Vulnerability
related-to
from CVE-2024-37383
Vulnerability
related-to
from CVE-2024-42009
Vulnerability
related-to
from CVE-2024-43573
Vulnerability
related-to
from CVE-2024-44309
Vulnerability
related-to
from CVE-2025-27915
Vulnerability
related-to
from CVE-2025-48700
Vulnerability
related-to
from CVE-2025-66376
Vulnerability
related-to
from CVE-2025-68461
Vulnerability
related-to
from CVE-2026-42897
Vulnerability
1 external

References

capec
CAPEC-592
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance