6. Cross-Site Scripting Attacks
Also known as an XSS attack, Cross Site Scripting happens when a malicious application bypasses the site validation. Once it’s activated, it makes users think that that compromised page is legitimate. It allows the hacker to manipulate that page and to visitors it is shown like a login screen.
This attack was discovered in WordPress 4.2 and it allowed the attacker to compromise a site through comments. If you want to test for XSS vulnerability, you can try Web Vulnerability Scanner. It can tell you which URLs or script could be vulnerable so you can fix them on time. The largest websites ever been affected by XSS attacks are FBI, EBay, CNN, Apple, Microsoft, and AOL.
GlebStock/Shutterstock.com
