1 item found
XSS occurs when untrusted content runs as script in the browser, risking session theft, forged actions, and data exposure.