Cross-Site Scripting

With XSS an attacker injects script code into a web page, which is then executed in other users' browsers. This can be used to hijack sessions, capture input or forge content. XSS has been among the most common vulnerabilities in web applications for years.