cross-site scripting (XSS)

Also written: XSS, reflected XSS, stored XSS

Injection that makes the attacker's `<script>` run in another visitor's browser. Reflected XSS bounces off one response, such as a crafted link. Stored XSS is saved on the server, such as in a review, so it runs for everyone who views the page.