cross-site scripting

An exploit that involves tricking a victim into executing a malicious script on a target website, so that the malicious content is trusted as though it were part of that site.