Cross-site scripting (XSS) attacks are often delivered by exploiting which of the following languages? Select two answers.

Analysis of the Question

Cross-site scripting (XSS) attacks involve injecting malicious scripts into webpages that can then be executed in the browser of users who visit those pages. These attacks primarily exploit certain client-side languages that can interpret and execute scripts.

Relevant Concepts

1. JavaScript: This is the most common language exploited in XSS attacks. Malicious scripts are often written in JavaScript to manipulate the Document Object Model (DOM), steal cookies, or perform actions on behalf of the user.
2. HTML: While HTML itself does not execute scripts, it allows for the insertion of scripts (like JavaScript) and can be exploited when user inputs allow for untrusted content to be rendered in a way that executes scripts.

Conclusion

Thus, the two languages that are typically exploited in XSS attacks are JavaScript and HTML.

Final Answer

1. JavaScript
2. HTML