A library comment field stores script that later runs in an adminis…

Question

A library comment field stores script that later runs in an administrator’s browser. Which XSS class best describes that pattern?

Accepted Answer

Stored XSS, which persists and can affect privileged users with higher impact potential. — The nasty part of stored XSS is the delay: plant it once, and it can fire later when an admin opens the thread. That persistence is why it often outranks a one-off reflected bounce. Comments that keep script for privileged eyes are a classic stored class.

Answer

Reflected XSS only, because comments never persist in databases.

Answer

DOM XSS only, because administrators never load server-rendered HTML.

Answer

CSR-only injection that cannot execute in browsers.

A library comment field stores script that later runs in an administrator’s browser. Which XSS class best describes that pattern?

Short Explanation

Full Explanation