Question: How can an attacker use XSS to manipulate form submissions and gather sensitive information?

Answer:

An attacker can use XSS to manipulate form submissions by injecting a malicious script that intercepts and manipulates the data before it is sent to the server, potentially leading to the disclosure of sensitive information.

MCQ: How can an attacker use XSS to manipulate form submissions and gather sensitive information?

A. By targeting the web application's server.
B. By injecting a malicious script that intercepts and manipulates form submissions before they reach the server.
C. XSS attacks cannot manipulate form submissions.
D. By modifying the web application's source code.

Correct Answer: A. By targeting the web application's server.

Explanation:

An attacker can use XSS to manipulate form submissions by injecting a malicious script that intercepts and manipulates the data before it is sent to the server, potentially leading to the disclosure of sensitive information.