Match the descriptions to these browser attacks terms: Stored XSS, Reflected XSS, DOM-based XSS, CSRF.

Browser attacksConcept relationships

Choose a match for every item. Use each answer once.

Stored cross-site scripting turns saved input into script execution in another user's browser context.

Reflected cross-site scripting executes attacker-controlled content when a victim follows or submits the crafted request.

CSRF exploits automatically attached credentials and requires protection appropriate to the application's request flow.

DOM-based injection can happen entirely within browser-side processing of untrusted values.

Browser attacksConcept relationships

Choose a match for every item. Use each answer once.

Stored cross-site scripting turns saved input into script execution in another user's browser context.

Reflected cross-site scripting executes attacker-controlled content when a victim follows or submits the crafted request.

CSRF exploits automatically attached credentials and requires protection appropriate to the application's request flow.

DOM-based injection can happen entirely within browser-side processing of untrusted values.