Search the Lexicon

XSS injection (Cross-site scripting)

XSS injection (Cross-site scripting) is a web security vulnerability where an attacker injects malicious client-side scripts (usually JavaScript) into a web page that other users' browsers will execute. It exploits unsafe handling of user input or insufficient output encoding/sanitization. Consequences include session theft, account takeover, content manipulation, and distribution of malware.