Respuesta :

With cross site scripting, attackers can inject malicious script embedded in a web page.  Cross-site scripting is an attack that relies on having a user execute a malicious script embedded in a web page.