Cross Site Scripting (XSS) is a situation where by attacker injects HTML code, which is then displayed on the page without further validation.

• 跨站脚本是被攻击者植入的可以在网页中直接显示的HTML代码。