Glossary: Web App Security and Authentication

XSS

Also written: cross-site scripting, stored XSS, reflected XSS

User text sent back inside a page that the browser runs as script. Stored XSS is saved first, like an order note; reflected XSS bounces straight back from the request.