Blind XSS

Definitions

1. A cross-site scripting vulnerability where the malicious payload executes in a different user's or admin's browser later, rather than immediately in the attacker's own session. Because execution is delayed and indirect, testers often use out-of-band callbacks to detect it.

   In plain English: An XSS flaw where the malicious script runs later in someone else's browser instead of right away in yours.

   Example: "The support dashboard contained a blind XSS issue that only fired when an admin reviewed the ticket."

Related Terms

• WAF
• SSRF
• HTTPS
• Content Security Policy
• CAPTCHA
• Blind Command Injection
• HPKP
• Reflected Input