== Types of XSS

=== Reflected
* Malicious content from a user request is displayed to the user in a web browser
* Malicious content is written into the page after from server response
* Social engineering is required
* Runs with browser privileges inherited from user in browser

=== DOM-based (also technically reflected)
* Malicious content from a user request is used by client-side scripts to write HTML to it own page
* Similar to reflected XSS 
* Runs with browser privileges inherited from user in browser

=== Stored or Persistent
* Malicious content is stored on the server ( in a database, file system, or other object ) and later displayed to users in a web browser
* Social engineering is not required

