System Auditor Interview Question:

Explain me what's the difference between stored and reflected XSS?

Submitted by: Muhammad

Stored is on a static page or pulled from a database and displayed to the user directly. Reflected comes from the user in the form of a request (usually constructed by an attacker), and then gets run in the victim's browser when the results are returned from the site.
Submitted by: Muhammad