Cross-Site Scripting (XSS) Glossary Definition

Cross Site Scripting is an attack on trusted and otherwise secure websites, by injecting malicious scripting. Attackers target websites that do not filter user inputs for strings or common characters in a script.

See also: XSS.

Cross-Site Scripting (XSS) is a Web security or Internet privacy concept used to protect users, sessions, resources, or browser interactions from misuse.

In web, data, cloud, and DevOps environments, this term helps teams describe application infrastructure, data flow, deployment practices, integration points, or operational tooling. It is relevant to how systems are built, hosted, versioned, monitored, and maintained.

Security teams, developers, and site owners use this concept when reducing risk in browser sessions, authentication flows, embedded content, and public-facing applications.

Related concepts include Authentication, Transport Layer Security and Cookie.

Additional Resource: MDN Web Docs Glossary.