Which of the following can be used to perform session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

A.
Cross-site scripting

B.
Session fixation

C.
Session sidejacking

D.
ARP spoofing