XSS involves injecting malicious scripts into web pages viewed by other users, often through comments or forms.
Why it matters:
- Can steal cookies, hijack sessions, or redirect users to malicious sites.
- Common on poorly secured websites.
Pro tip: Sanitize user input and implement content security policies (CSP).
« Back to Glossary Index