I have Burp and Appscan telling me that Reflected XSS is possible due to a particular variable on a particular page.
The following example is given of what Appscan injected
and what Burp injected
I can get the code displayed in the source of the page, so I know the vuln is there, but I am having trouble actually validating it.
What is in common, if anything, with what burp and appscan used to validate the vulnerability?
I'd like to understand this better so I can validate easier in the future.