← Back to glossary

🧨

XSS (Cross‑Site Scripting)

Web Security

Session Hijacking Clickjacking Security Headers Web Application Firewall (WAF)

Injecting harmful scripts into a website.

Definition

XSS is when an attacker gets a website to run malicious JavaScript in your browser, often by injecting code into a page.

In plain English Injecting harmful scripts into a website.

Why this matters

Why it matters: It can steal session cookies, read page data, or change what you see—affecting privacy and security.

Example

Example: A comment box is used to inject a script that steals login sessions.