What is Cross site scripting? Explain Csrf vs Xss ?

Question

Accepted Answer

Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious code into web pages viewed by other users.

XSS occurs when an attacker injects malicious code into a web page viewed by other users
CSRF occurs when an attacker tricks a user into performing an action on a website without their knowledge or consent
XSS can be used to steal sensitive information, such as login credentials or personal data
CSRF can be used to perform actions on behalf of the user, such as changing their password or making a purchase
Preventing XSS involves validating user input and encoding output
Preventing CSRF involves using anti-CSRF tokens and checking the HTTP Referer header

Interview Questions Asked to Penetration Tester at Other Companies