
DOM-based XSS
DOM-Based Cross-Site Scripting (XSS) is a security vulnerability that occurs when a web application modifies its webpage using the Document Object Model (DOM) in an unsafe way. This happens when user input is used directly to change the website's content or behavior without proper validation. An attacker can exploit this by injecting malicious scripts that run in a user's browser, potentially stealing sensitive information or performing unauthorized actions. Unlike traditional XSS, which involves server-side processing, DOM-Based XSS happens entirely within the user's browser as the webpage is manipulated on the client side.