Question: what is the difference between stored and reflected xss?
Answer: Stored XSS means that some persistant data (typically stored in a databse) are not sanitized in a page, which implies that everyone can be affected by the vulnerability. ... Reflected XSS, on the contrary, means that non-persistent data (generally data provided by the client through form submission) are not escaped.