Cross-Site Scripting

Definition ∞ Cross-Site Scripting is a web security flaw allowing malicious scripts to be injected into websites. This vulnerability permits attackers to inject client-side scripts, such as JavaScript, into web pages viewed by other users, often through insecure input fields. The injected script can then execute in the victim’s browser, potentially stealing cookies, session tokens, or other sensitive information. Such attacks compromise user accounts and website integrity.
Context ∞ While not exclusive to crypto, Cross-Site Scripting attacks pose a constant threat to cryptocurrency exchanges, decentralized applications, and wallet interfaces. Successful XSS exploits can lead to unauthorized access to user funds or personal data, contributing to security breaches reported in the news. Developers prioritize robust input validation and content security policies to mitigate these persistent risks.