Typical severity: Very High. Likelihood of attack: High. An adversary utilizes a form of Cross-site Scripting (XSS) where a malicious script is persistently "stored" within the data storage of a vulnerable web application as valid input.
Use browser technologies that do not allow client-side scripting. | Utilize strict type, character, and encoding enforcement. | Ensure that all user-supplied input is validated before being stored.