Cross-Site Scripting (XSS) — Cross-site scripting attacks cause a browser to run attacker-controlled script through a vulnerable website or application. The script can exploit the user’s trust in the site to access information or trigger unauthorized actions. Defenses include context-appropriate encoding, safe application interfaces, and careful handling of untrusted input.

Added November 6, 2026