Definition: Cross site scripting (XSS) refers to the ability to use some of the functionality of active scripting against the user by inserting malicious code into the HTML that will run code on the user's computer, redirect them to a site other than what they intended or steal passwords and personal information among other things.
Cross site scripting is a programming problem and not a vulnerability of any particular web browser software or web hosting server. It is up to the web site developer to ensure that user input is validated and checked for malicious code before executing it.
Also Known As: XSS