Cross-site scripting (XSS)

Cross-site scripting (XSS) is a web application vulnerability where attackers inject malicious scripts into web pages viewed by other users. It allows the attacker to execute scripts within the victim's browser, potentially leading to session hijacking or data theft.

Types of XSS

• Stored XSS: Malicious script stored on the server
• Reflected XSS: Malicious script reflected from user input
• DOM-based XSS: Vulnerability in client-side code