CS0-003 Question 95

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 3

  D, IMG SRC= is HTML and Cross-site scripting (XSS) injects code into a web app

• Chose D3

  < IMG SRC='vbscript:msgbox("test")' > attempts to inject a VBScript code snippet (vbscript:msgbox("test")) into an HTML IMG tag's source attribute.

• 3

  I used Google and it verified XSS.