Cross-site Scripting (XSS)

This occurs when a malicious script is injected into a trusted website. The code allows the attack to execute scripts in the victim’s browser or redirect the user to a malicious site. An XSS attack usually exploits a website or application but also uses social engineering to exhort the user to perform an action such as the clicking of a link or attachment.