Cross-Site Scripting (XSS)
Injecting malicious scripts into trusted websites.
Types of XSS
Reflected XSS: Payload is part of the request (URL parameters). Stored XSS: Payload is stored in the database (comments, profiles). DOM XSS: Payload executes in the client-side JavaScript environment.