Glossary: JavaScript in the Browser
XSS (cross-site scripting)
Also written: XSS, cross-site scripting
An attack where someone's JavaScript runs inside your page, for example through a review written with innerHTML. It could then reach your visitor's cart and login.