In this section, we will discuss the Cross-Site Scripting (XSS) attack. XSS attacks exploit vulnerabilities in dynamically-generated web pages, and this happens when invalidated input data is included in the dynamic content that is sent to the user's browser for rendering.
Cross-site attacks are of the following two types:
- Persistent or stored XSS
- Nonpersistent or reflected XSS