GPEN Exam - Question 23

Web logs containing XSS may execute shell scripts when opened In a GUI textbrowser

XSS attacks cause web logs to become unreadable and therefore are an effective DOS attack.

If web logs are viewed in a web-based console, log entries containing XSS mayexecute on the browser.

When web logs are viewed in a terminal. XSS can escape to the shell and executecommands.