Cross Site Scripting (XSS) is a type of computer security vulnerability typically found in web applications. This vulnerability enables attackers to inject malicious scripts into web pages viewed by other users. XSS attacks occur when an application includes untrusted data in a new web page without proper validation or escaping, or updates an existing web page with user-supplied data using a browser API that can create HTML or JavaScript.

XSS attacks can lead to a variety of problems, including identity theft, data theft, and defacement of websites. To protect against XSS attacks, web applications should employ techniques such as input validation, output encoding, and use of appropriate response headers.

See the Write-Up SQLi to know what i do