CATEGORY 10 / 59

XSS et navigateur

13 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C10-T001
source 5

Reflected XSS

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T002
source 5

Stored XSS

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T003
source 5

DOM XSS

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T004
source 5

XSS dans attribut HTML

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T005
source 5

XSS dans SVG

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T006
source 5

XSS dans fichiers importés

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T007
source 5

XSS dans back-office

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T008
source 5

XSS via nom de fichier

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T009
source 5

XSS via champs profil

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T010
source 5

XSS via messages d'erreur

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T011
source 5

Mutation XSS

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T012
source 5

Prototype pollution côté client

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C10-T013
source 5

DOM clobbering

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope