Stored XSS Simplified!

[@sachinsaju5236]

Thanks a lot. Is there any step by step method one can follow to figure out xss vulnerability in a website?

[@intigriti]

Sadly it isn't that easy. Every site is different. A deep understand of the dataflows within a site can help tremendously!

[@SanthoshN-q5h]

Ah well, I'm late to watch this video but now i come up with a doubt, xss protection blocking while if there is a script on anywhere inside the page, comment, URL,Form, etc.., what to do now!?

[@intigriti]

Hey, check out the web security academy on portswigger.net - they have way more advanced labs that will cover various protections 😉

[@user-fg4xq7le7r]

What about if this is not public page that case still considered xss stored?

[@intigriti]

It is still considered a stored XSS!

[@user-fg4xq7le7r]

@@intigriti But it needs affect to other users it doesn’t affect how it can be stored xss?