Skip to main content

Cross-Site Scripting

Definition

Cross-Site Scripting is a web security flaw allowing malicious scripts to be injected into websites. This vulnerability permits attackers to inject client-side scripts, such as JavaScript, into web pages viewed by other users, often through insecure input fields. The injected script can then execute in the victim’s browser, potentially stealing cookies, session tokens, or other sensitive information. Such attacks compromise user accounts and website integrity.