What is reflected XSS (cross-site scripting)? Tutorial
Reflected cross-site scripting (or XSS) arises when an application receives data in an HTTP request and includes that data within the immediate response in an unsafe way. Suppose a website has a search function which receives the user-supplied search term in a URL parameter: The application echoes the supplied search term in the response to ...