Cross-Site Scripting — Cross-site scripting introduces attacker-controlled script into content that a victim’s browser processes within a website’s context. The script abuses the trust associated with that site. Appropriate output encoding, safe rendering methods, and supporting browser policies reduce the risk. – Application Attack

Added October 7, 2026

Cross-Site Scripting — Cross-site scripting is a vulnerability that allows untrusted content to execute as script within another user’s browser in a trusted website’s context. Attackers can exploit it to alter displayed content, steal accessible information, or perform actions through the victim’s session. Appropriate output encoding, safe handling of content, and related protections help prevent exploitation.

Added November 6, 2026