Cross-Site Scripting (XSS) is a client-side code injection attack where malicious scripts are injected into trusted websites

. These scripts execute in the victim's browser, allowing attackers to steal sensitive data like session cookies, hijack accounts, or deface websites. PortSwigger Common Types of XSS Types of XSS - OWASP Foundation