ARCHIVES

Cross-site scripting attack, abbreviated as XSS , has been an incessant problem for Web applications since the early 2000s. It is a code injection attack on the client -side where an attacker injects malicious payload intoavulner able we b applic ation, without client’s knowledge. The attacker is often successful in executing the malicious code inadvertently in the browser of an unwary user. Attempts have been made to implement the detection of XS S attacks using Genetic Algorithm, Web Vulnerabilities Finder, Fuzzy Interference Model, but they all come with drawbacks. Implementation URL of the website is collected through an extension and vulnerability is checked by injecting java-script code to the website. If the website is vulnerable, then display a pop -up stating “Website is vulnerable, be aware”, else display a pop -up stating “ W ebsite is not vulner able ”. It is a low cost model which is easy to implement.