Reflected XSS
Reflected Cross-Site Scripting arises when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way.
User search query is reflected directly into the HTML response without sanitization.
The application enforces a blacklist blocking specific HTML tags with a 403 Forbidden response, but permits alternative execution tags.
A dynamic navigation link reflects user input into an href attribute without protocol validation.
User input is reflected inside an input value attribute without quote escaping.
Angle brackets are completely stripped by the server, but the input attribute remains exploitable.
The application reflects input but blocks common JavaScript functions like alert and prompt.
The application strips or blocks the keywords alert, prompt, and confirm from reflected input.
Parentheses () are strictly forbidden by the input filter, requiring alternative JS execution syntax.
User input is placed directly inside an inline JavaScript script block.
The vulnerable endpoint and query parameter are not shown in the UI but referenced inside client-side JS.
The vulnerable component must be uncovered through directory discovery, file fuzzing, and parameter analysis.