---
title: Cross-Site Scripting (XSS)
description: Cross-site scripting is an injection attack that runs attacker-controlled script in a victim's browser, usually by embedding markup in a page the application then renders as trusted HTML.
tokens: ~0
---

# Cross-Site Scripting (XSS)

undefined