Cross-site scripting
Also known as XSS
A vulnerability where attacker-controlled content executes as script in a user's browser.
In the real world
Unsafe HTML insertion can let a comment execute malicious JavaScript.
Also known as XSS
A vulnerability where attacker-controlled content executes as script in a user's browser.
Unsafe HTML insertion can let a comment execute malicious JavaScript.