Glossary: Vulnerability Management and Monitoring

cross-site scripting

Also written: CWE-79, XSS

A web weakness, numbered CWE-79, in which a site can be made to send an attacker's script to other visitors' browsers. It topped MITRE's 2025 CWE Top 25 list.