Cross-site scripting

Cross-site scripting is a type of web vulnerability where an attacker injects malicious scripts into a trusted website that is viewed by other users. The injected scripts execute in the users' browsers, allowing the attacker to steal sensitive information, manipulate website content, or perform unauthorized actions on behalf of the user. XSS attacks typically target web applications that do not properly validate user input or sanitize data.