Cross Site Scripting (XSS)

Cross Site Scripting is a code injection attack that allows an attacker to execute malicious javascript in another users's browser. It's mainly a Client Side attack.

XSS attacks are often divided into three types:

1. Persistent XSS - Where malicious strings originates from the website database.
2. Reflected XSS -  Where malicious strings originates from Victim request.
3. DOM-Based XSS -  Vulnerability is in the client side code rather than the Server side code. 

Cross Site Scripting Context

full-width