Study. uk . com
  1. Home
  2. All questions
  3. Question 127

CompTIA Security+ study material · question 127 of 611

A stored cross-site scripting flaw fires when the victim simply views a page. Which CVSS v4.0 User Interaction value fits?

  1. Active
  2. Passive
  3. None
  4. Required
Show the answer

Answer: B. Passive

Passive covers involuntary interaction where the user does not subvert any protection, such as rendering a modified page.

Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › User Interaction (UI)

Challenge yourself on this topic → Study as cards